WifiDog 认证协议研究之 Auth Server

2015-02-02 本文已影响508人 3c937c88e6c0

认证流程如下图：

认证流程详解：

1.Login登录（参照 login/index.php）

服务器验证后，Redirect to GW，携带 token

http://$_REQUEST[gw_address]:$_REQUEST[gw_port]/wifidog/auth?token=$token

2.Validation of ID

服务器返回 Status

Auth: 1

Messages: | 认证信息（如错误之类的消息）

common.php中有如下定义：

/* Constant shared with the gateway

* NEVER edit these, as they mush match the C code of the gateway */

define('ACCOUNT_STATUS_ERROR', -1);

define('ACCOUNT_STATUS_DENIED', 0);

define('ACCOUNT_STATUS_ALLOWED', 1);

define('ACCOUNT_STATUS_VALIDATION', 5);

define('ACCOUNT_STATUS_VALIDATION_FAILED', 6);

define('ACCOUNT_STATUS_LOCKED', 254);

auth.h中也有相应定义：

/**

* @brief Authentication codes returned by auth server.

* Authentication result codes returned by auth_server_request() corresponding

* to result code from the central server itself.

typedef enum {

AUTH_ERROR = -1, /**< An error occured during the validation process*/

AUTH_DENIED = 0, /**< Client was denied by the auth server */

AUTH_ALLOWED = 1, /**< Client was granted access by the auth server */

AUTH_VALIDATION = 5, /**< A misnomer. Client is in 15 min probation to validate his new account */

AUTH_VALIDATION_FAILED = 6, /**< Client had X minutes to validate account by email and didn't = too late */

AUTH_LOCKED = 254 /**< Account has been locked */

} t_authcode;