/* Copyright (c) Dovecot authors, see top-level COPYING file */

#include "lib.h"

#include "dsasl-client-private.h"

struct external_dsasl_client {

  struct dsasl_client client;

  bool output_sent;

};

static enum dsasl_client_result

mech_external_input(struct dsasl_client *_client,

        const unsigned char *input ATTR_UNUSED, size_t input_len,

        const char **error_r)

{

  struct external_dsasl_client *client =

    (struct external_dsasl_client *)_client;

  if (!client->output_sent) {

    if (input_len > 0) {

      *error_r = "Server sent non-empty initial response";

      return DSASL_CLIENT_RESULT_ERR_PROTOCOL;

    }

  } else {

    *error_r = "Server didn't finish authentication";

    return DSASL_CLIENT_RESULT_ERR_PROTOCOL;

  }

  return DSASL_CLIENT_RESULT_OK;

}

static enum dsasl_client_result

mech_external_output(struct dsasl_client *_client,

         const unsigned char **output_r, size_t *output_len_r,

         const char **error_r ATTR_UNUSED)

{

  struct external_dsasl_client *client =

    (struct external_dsasl_client *)_client;

  const char *username;

  if (_client->set.authzid != NULL)

    username = _client->set.authzid;

  else if (_client->set.authid != NULL)

    username = _client->set.authid;

  else

    username = "";

  *output_r = (const void *)username;

  *output_len_r = strlen(username);

  client->output_sent = TRUE;

  return DSASL_CLIENT_RESULT_OK;

}

const struct dsasl_client_mech dsasl_client_mech_external = {

  .name = SASL_MECH_NAME_EXTERNAL,

  .struct_size = sizeof(struct external_dsasl_client),

  .flags = DSASL_MECH_SEC_NO_PASSWORD,

  .input = mech_external_input,

  .output = mech_external_output

};