summaryrefslogtreecommitdiffstats
path: root/meta-security/recipes-test/tcp-smack-test/files/tcp_client.c
blob: 185f9738074926d9f6b30983b9de135db8cccefa (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
// (C) Copyright 2015 Intel Corporation
//
// Permission is hereby granted, free of charge, to any person obtaining a copy
// of this software and associated documentation files (the "Software"), to deal
// in the Software without restriction, including without limitation the rights
// to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
// copies of the Software, and to permit persons to whom the Software is
// furnished to do so, subject to the following conditions:
//
// The above copyright notice and this permission notice shall be included in
// all copies or substantial portions of the Software.
//
// THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
// IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
// FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
// AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
// LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
// OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
// THE SOFTWARE.
#include <stdio.h>
#include <sys/socket.h>
#include <sys/types.h>
#include <errno.h>
#include <netinet/in.h>
#include <unistd.h>
#include <netdb.h>
#include <string.h>
#include <sys/xattr.h>

int main(int argc, char* argv[])
{

	int sock;
	char message[255] = "hello";
	struct sockaddr_in server_addr;
	char* label_in;
	char* label_out;
	char* attr_out = "security.SMACK64IPOUT";
	char* attr_in = "security.SMACK64IPIN";
	char out[256];
	int port;

	struct timeval timeout;
	timeout.tv_sec = 15;
	timeout.tv_usec = 0;

	struct hostent*  host = gethostbyname("localhost");

	if (argc != 4)
	{
		perror("Client: Arguments missing, please provide socket labels");
		return 2;
	}

	port = atoi(argv[1]);
	label_in = argv[2];
	label_out = argv[3];

	if((sock = socket(AF_INET, SOCK_STREAM, 0)) < 0)
	{
		perror("Client: Socket failure");
		return 2;
	}


	if(fsetxattr(sock, attr_out, label_out, strlen(label_out), 0) < 0)
	{
		perror("Client: Unable to set attribute SMACK64IPOUT");
		return 2;
	}

	if(fsetxattr(sock, attr_in, label_in, strlen(label_in), 0) < 0)
	{
		perror("Client: Unable to set attribute SMACK64IPIN");
		return 2;
	}

	server_addr.sin_family = AF_INET;
	server_addr.sin_port = htons(port);
	bcopy((char*) host->h_addr, (char*) &server_addr.sin_addr.s_addr,host->h_length);
	bzero(&(server_addr.sin_zero),8);
	
	if(setsockopt(sock, SOL_SOCKET, SO_SNDTIMEO, &timeout, sizeof(timeout)) < 0)
	{
		perror("Client: Set timeout failed\n");
		return 2;
	}
	
	if (connect(sock, (struct sockaddr *)&server_addr,sizeof(struct sockaddr)) == -1)
	{
    		perror("Client: Connection failure");
			close(sock);
        	return 1;
	}


	if(write(sock, message, strlen(message)) < 0)
	{
		perror("Client: Error sending data\n");
		close(sock);
		return 1;
	}
	close(sock);
	return 0;
}
;: "afb-reply", "request": {"status":"success"}, "response": {"isvalid":true} } ``` Refresh the token: ```bash $ curl http://localhost:1234/api/auth/refresh?token=0aef6841-2ddd-436d-b961-ae78da3b5c5f\&uuid=850c4594-1be1-4e9b-9fcc-38cc3e6ff015 { "jtype": "afb-reply", "request": { "status":"success", "token":"b8ec3ec3-6ffe-448c-9a6c-efda69ad7bd9" }, "response": {"token":"Token was refreshed"} } ``` Close the session: ```bash $ curl http://localhost:1234/api/auth/logout?token=b8ec3ec3-6ffe-448c-9a6c-efda69ad7bd9\&uuid=850c4594-1be1-4e9b-9fcc-38cc3e6ff015 { "jtype": "afb-reply", "request": {"status": "success"}, "response": {"info":"Token and all resources are released"} } ``` Checking on closed session for uuid should be refused: ```bash $ curl http://localhost:1234/api/auth/check?token=b8ec3ec3-6ffe-448c-9a6c-efda69ad7bd9\&uuid=850c4594-1be1-4e9b-9fcc-38cc3e6ff015 { "jtype": "afb-reply", "request": { "status": "failed", "info": "invalid token's identity" } } ``` #### Using afb-client-demo - The program is packaged within AGL in the rpm **libafbwsc-dev** Here is an example of exchange using **afb-client-demo**: ```bash $ afb-client-demo ws://localhost:1234/api?token=123456 auth connect ON-REPLY 1:auth/connect: {"jtype":"afb-reply","request":{"status":"success", "token":"63f71a29-8b52-4f9b-829f-b3028ba46b68","uuid":"5fcc3f3d-4b84-4fc7-ba66-2d8bd34ae7d1"}, "response":{"token":"A New Token and Session Context Was Created"}} auth check ON-REPLY 2:auth/check: {"jtype":"afb-reply","request":{"status":"success"},"response":{"isvalid":true}} auth refresh ON-REPLY 4:auth/refresh: {"jtype":"afb-reply","request":{"status":"success", "token":"8b8ba8f4-1b0c-48fa-962d-4a00a8c9157e"},"response":{"token":"Token was refreshed"}} auth check ON-REPLY 5:auth/check: {"jtype":"afb-reply","request":{"status":"success"},"response":{"isvalid":true}} auth refresh ON-REPLY 6:auth/refresh: {"jtype":"afb-reply","request":{"status":"success", "token":"e83b36f8-d945-463d-b983-5d8ed73ba529"},"response":{"token":"Token was refreshed"}} ``` After closing connection, reconnect as here after: ```bash $ afb-client-demo ws://localhost:1234/api?token=e83b36f8-d945-463d-b983-5d8ed73ba529\&uuid=5fcc3f3d-4b84-4fc7-ba66-2d8bd34ae7d1 auth check ON-REPLY 1:auth/check: {"jtype":"afb-reply","request":{"status":"success"},"response":{"isvalid":true}} ``` Same connection check using **curl**: ```bash $ curl http://localhost:1234/api/auth/check?token=e83b36f8-d945-463d-b983-5d8ed73ba529\&uuid=5fcc3f3d-4b84-4fc7-ba66-2d8bd34ae7d1 {"jtype":"afb-reply","request":{"status":"success"},"response":{"isvalid":true}} ``` ### Format of replies Replies use javascript object returned as serialized JSON. This object contains at least 2 mandatory fields of name **jtype** and **request** and one optional field of name **response**. #### Template of replies This is a template of replies: ```json { "jtype": "afb-reply", "request": { "status": "success", "info": "informationnal text", "token": "e83b36f8-d945-463d-b983-5d8ed73ba52", "uuid": "5fcc3f3d-4b84-4fc7-ba66-2d8bd34ae7d1", "reqid": "application-generated-id-23456" }, "response": ....any response object.... } ``` #### Field jtype of replies The field **jtype** must have a value of type string equal to **"afb-reply"**. #### Field request of replies The field **request** must have a value of type object. This request object has at least one field named **status** and four optional fields named **info**, **token**, **uuid**, **reqid**. ##### Subfield request.status **status** must have a value of type string. This string is equal to **"success"** only in case of success. ##### Subfield request.info **info** is of type string and represent optional information added to the reply. ##### Subfield request.token **token** is of type string. It is sent either at session creation or when the token is refreshed. ##### Subfield request.uuid **uuid** is of type string. It is sent at session creation. ##### Subfield request.reqid **reqid** is of type string. It is sent in response to HTTP requests that added a parameter of name **reqid** or **x-afb-reqid** at request time. Value returns in the reply has the exact same value as the one received in the request. #### Field response of replies This field response optionally contains an object returned when request succeeded. ### Format of events Events are javascript object serialized as JSON. This object contains at least 2 mandatory fields of name **jtype** and **event** and one optional field of name **data**. #### Template of event Here is a template of event: ```json { "jtype": "afb-event", "event": "sample_api_name/sample_event_name", "data": ...any event data... } ``` #### Field jtype of event The field **jtype** must have a value of type string equal to **"afb-event"**. #### Field event of event The field **event** carries the event's name. The name of the event is made of two parts separated by a slash: the name of the name of the API that generated the event and the name of event within the API. #### Field data of event This field data if present holds the data carried by the event.