123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173 |
- /*
- * This program is free software: you can redistribute it and/or modify it under
- * the terms of the GNU General Public License as published by the Free Software
- * Foundation, either version 3 of the License, or (at your option) any later
- * version.
- *
- * This program is distributed in the hope that it will be useful, but WITHOUT
- * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
- * FOR A PARTICULAR PURPOSE. See the GNU General Public License for more
- * details.
- *
- * You should have received a copy of the GNU General Public License along with
- * this program. If not, see <http://www.gnu.org/licenses/>.
- */
- package com.l2jserver.loginserver.clientpackets;
- import java.net.InetAddress;
- import java.security.GeneralSecurityException;
- import java.util.logging.Level;
- import java.util.logging.Logger;
- import javax.crypto.Cipher;
- import com.l2jserver.Config;
- import com.l2jserver.loginserver.GameServerTable.GameServerInfo;
- import com.l2jserver.loginserver.HackingException;
- import com.l2jserver.loginserver.L2LoginClient;
- import com.l2jserver.loginserver.L2LoginClient.LoginClientState;
- import com.l2jserver.loginserver.LoginController;
- import com.l2jserver.loginserver.LoginController.AuthLoginResult;
- import com.l2jserver.loginserver.serverpackets.AccountKicked;
- import com.l2jserver.loginserver.serverpackets.AccountKicked.AccountKickedReason;
- import com.l2jserver.loginserver.serverpackets.LoginFail.LoginFailReason;
- import com.l2jserver.loginserver.serverpackets.LoginOk;
- import com.l2jserver.loginserver.serverpackets.ServerList;
- /**
- * Format: x
- * 0 (a leading null)
- * x: the rsa encrypted block with the login an password
- */
- public class RequestAuthLogin extends L2LoginClientPacket
- {
- private static Logger _log = Logger.getLogger(RequestAuthLogin.class.getName());
-
- private byte[] _raw = new byte[128];
-
- private String _user;
- private String _password;
- private int _ncotp;
-
- /**
- * @return
- */
- public String getPassword()
- {
- return _password;
- }
-
- /**
- * @return
- */
- public String getUser()
- {
- return _user;
- }
-
- public int getOneTimePassword()
- {
- return _ncotp;
- }
-
- @Override
- public boolean readImpl()
- {
- if (super._buf.remaining() >= 128)
- {
- readB(_raw);
- return true;
- }
- else
- {
- return false;
- }
- }
-
- @Override
- public void run()
- {
- byte[] decrypted = null;
- L2LoginClient client = getClient();
- try
- {
- Cipher rsaCipher = Cipher.getInstance("RSA/ECB/nopadding");
- rsaCipher.init(Cipher.DECRYPT_MODE, client.getRSAPrivateKey());
- decrypted = rsaCipher.doFinal(_raw, 0x00, 0x80 );
- }
- catch (GeneralSecurityException e)
- {
- _log.log(Level.INFO, "" , e);
- return;
- }
-
- _user = new String(decrypted, 0x5E, 14 ).trim();
- _user = _user.toLowerCase();
- _password = new String(decrypted, 0x6C, 16).trim();
- _ncotp = decrypted[0x7c];
- _ncotp |= decrypted[0x7d] << 8;
- _ncotp |= decrypted[0x7e] << 16;
- _ncotp |= decrypted[0x7f] << 24;
-
- LoginController lc = LoginController.getInstance();
- try
- {
- AuthLoginResult result = lc.tryAuthLogin(_user, _password, client);
-
- switch (result)
- {
- case AUTH_SUCCESS:
- client.setAccount(_user);
- lc.getCharactersOnAccount(_user);
- client.setState(LoginClientState.AUTHED_LOGIN);
- client.setSessionKey(lc.assignSessionKeyToClient(_user, client));
- if (Config.SHOW_LICENCE)
- {
- client.sendPacket(new LoginOk(getClient().getSessionKey()));
- }
- else
- {
- getClient().sendPacket(new ServerList(getClient()));
- }
- break;
- case INVALID_PASSWORD:
- client.close(LoginFailReason.REASON_USER_OR_PASS_WRONG);
- break;
- case ACCOUNT_BANNED:
- client.close(new AccountKicked(AccountKickedReason.REASON_PERMANENTLY_BANNED));
- break;
- case ALREADY_ON_LS:
- L2LoginClient oldClient;
- if ((oldClient = lc.getAuthedClient(_user)) != null)
- {
- // kick the other client
- oldClient.close(LoginFailReason.REASON_ACCOUNT_IN_USE);
- lc.removeAuthedLoginClient(_user);
- }
- // kick also current client
- client.close(LoginFailReason.REASON_ACCOUNT_IN_USE);
- break;
- case ALREADY_ON_GS:
- GameServerInfo gsi;
- if ((gsi = lc.getAccountOnGameServer(_user)) != null)
- {
- client.close(LoginFailReason.REASON_ACCOUNT_IN_USE);
-
- // kick from there
- if (gsi.isAuthed())
- {
- gsi.getGameServerThread().kickPlayer(_user);
- }
- }
- break;
- }
- }
- catch (HackingException e)
- {
- InetAddress address = getClient().getConnection().getInetAddress();
- lc.addBanForAddress(address, Config.LOGIN_BLOCK_AFTER_BAN*1000);
- _log.info("Banned ("+address+") for "+Config.LOGIN_BLOCK_AFTER_BAN+" seconds, due to "+e.getConnects()+" incorrect login attempts.");
- }
- }
- }
|