Skip to content

1.2610-3

Choose a tag to compare

View all tags
@Pintuzoft Pintuzoft released this 11 Oct 01:22
· 8 commits to master since this release
v1.2610-3
373d5b2
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

Avade for bahamut 2.2.4. The link in the mails now has a page behind it, and every mail has a command for IRC as well.

Upgrading

Download Avade-1.2610-3.tar.gz below. It is Avade built and ready to install: the jars, the installer, the configs, the docs, the bahamut module and the confirmation page. Java 17 or newer is all the machine needs.

tar xzf Avade-1.2610-3.tar.gz
cd Avade-1.2610-3
./install.sh

With git instead: git pull, ./make.sh install and ./avade.sh restart.

The database does not change, and nothing new has to be in services.conf. Coming from a version older than 1.2610-1, read the notes of 1.2610-1 first.

New

  • The confirmation page, web/auth/. When someone registers a nick, changes its mail address or asks for a new password, services send a mail with a link. The page behind that link was never part of Avade, so a new installation mailed a dead link. Now it comes along: one PHP file and a settings file, for your web server (it can be another machine than services, the database is all they share). It shows whose address or password the code is about and asks for a click, because mail programs and virus scanners open links by themselves. Services then make the change within five seconds and tell the user on IRC, and the page waits and says what really happened.
  • /NickServ AUTH <code> in every mail. The same code as in the link, as a command for IRC. A network without a page works with that alone, and so does a link that fails.
  • The setup writes authurl ending in ?code=, which needs no rewrite rule on the web server.

Setting the page up is section 13 of INSTALL: copy the folder, fill in config.php, and give the page a database account with four column grants. That account can not read a mail address or a password hash.

If you have a page of your own

Check two things, they fail without any error on the page:

  • The row in the command table must have the code in extra (and the address of the visitor in extra2). Services have required it since 1.2004-3: a row without it is tried five times and removed, and nothing is confirmed.
  • Services put the code right after authurl, with nothing in between. authurl: https://example.net/auth.php gives https://example.net/auth.php3f9c..., which is not a page. It has to end in what comes before the code: https://example.net/auth/?code=.

What to add to the config

Nothing has to be added. To use the page that comes with Avade, in services.conf:

authurl: https://example.net/auth/?code=

and /RootServ REHASH.

The host-masking module for bahamut

avade_uhm-1.0.tar.gz is unchanged.

Tested

The test suite (tests/) runs Avade against a real bahamut 2.2.4 hub and leaf with MariaDB: 399 checks. The page runs in a PHP container against the test database with exactly the grants from INSTALL: a link without a code, an unknown code, a link that is only opened, the click, the notice on IRC, the log, the same link twice, and a password change.

Assets 4
Loading