stratum: password authentication

Author: 1ma

src/datum_conf.c

@@ -110,7 +110,10 @@ const T_DATUM_CONFIG_ITEM datum_config_options[] = {
 		.required = false, .ptr = &datum_config.stratum_v1_idle_timeout_no_share, 	.default_int = 7200 },
 	{ .var_type = DATUM_CONF_INT, 		.category = "stratum", 		.name = "idle_timeout_max_last_work",	.description = "Seconds we allow a subscribed connection to be idle since its last accepted share? (0 disables)",
 		.required = false, .ptr = &datum_config.stratum_v1_idle_timeout_max_last_work, 	.default_int = 0 },
-	{ .var_type = DATUM_CONF_USERNAME_MODS, .category = "stratum", .name = "username_modifiers", .description = "Modifiers to redirect some portion of shares to alternate usernames", .required = false, .ptr = &datum_config.stratum_username_mod, },
+	{ .var_type = DATUM_CONF_STRING, 	.category = "stratum", 		.name = "password",			.description = "Authentication password (disabled if blank)",
+		.required = false, .ptr = datum_config.stratum_v1_password,				.default_string[0] = "", .max_string_len = sizeof(datum_config.stratum_v1_password) },
+	{ .var_type = DATUM_CONF_USERNAME_MODS, .category = "stratum", .name = "username_modifiers", .description = "Modifiers to redirect some portion of shares to alternate usernames",
+		.required = false, .ptr = &datum_config.stratum_username_mod, },
 
 	// mining settings
 	{ .var_type = DATUM_CONF_STRING, 	.category = "mining", 		.name = "pool_address",				.description = "Bitcoin address used for mining rewards.",
@@ -588,6 +591,8 @@ int datum_read_config(const char *conffile) {
 		return 0;
 	}
 
+	datum_config.stratum_v1_password_len = strlen(datum_config.stratum_v1_password);
+	
 	if (datum_config.datum_protocol_global_timeout < (datum_config.bitcoind_work_update_seconds+5)) {
 		DLOG_FATAL("DATUM protocol global timeout must be at least the work update interval plus 5 seconds.");
 		return 0;

src/datum_conf.h

@@ -121,6 +121,8 @@ typedef struct {
 	int stratum_v1_idle_timeout_no_subscribe;
 	int stratum_v1_idle_timeout_no_share;
 	int stratum_v1_idle_timeout_max_last_work;
+	char stratum_v1_password[72];
+	size_t stratum_v1_password_len;
 
 	void *stratum_username_mod;
 

src/datum_stratum.c

@@ -1444,7 +1444,9 @@ int client_mining_configure(T_DATUM_CLIENT_DATA *c, uint64_t id, json_t *params_
 int client_mining_authorize(T_DATUM_CLIENT_DATA *c, uint64_t id, json_t *params_obj) {
 	char s[256];
 	const char *username_s;
+	const char *password_s;
 	json_t *username;
+	json_t *password;
 
 	T_DATUM_MINER_DATA * const m = c->app_client_data;
 
@@ -1461,10 +1463,28 @@ int client_mining_authorize(T_DATUM_CLIENT_DATA *c, uint64_t id, json_t *params_
 	strncpy(m->last_auth_username, username_s, sizeof(m->last_auth_username) - 1);
 	m->last_auth_username[sizeof(m->last_auth_username)-1] = 0;
 
-	snprintf(s, sizeof(s), "{\"error\":null,\"id\":%"PRIu64",\"result\":true}\n", id);
-	datum_socket_send_string_to_client(c, s);
+	password = json_array_get(params_obj, 1);
+	if (!password) {
+		password_s = (const char *)"x";
+	} else {
+		password_s = json_string_value(password);
+		if (!password_s) {
+			password_s = (const char *)"x";
+		}
+	}
 
-	m->authorized = true;
+	if (datum_config.stratum_v1_password_len > 0 && !datum_secure_strequals(datum_config.stratum_v1_password, datum_config.stratum_v1_password_len, password_s)) {
+		DLOG_DEBUG("Kicking client %d/%d (%s) due to unsuccessful authentication attempt", c->datum_thread->thread_id, c->cid, c->rem_host);
+		snprintf(s, sizeof(s), "{\"error\":null,\"id\":%"PRIu64",\"result\":false}\n", id);
+		c->datum_thread->has_client_kill_request = true;
+		c->kill_request = true;
+		m->authorized = false;
+	} else {
+		snprintf(s, sizeof(s), "{\"error\":null,\"id\":%"PRIu64",\"result\":true}\n", id);
+		m->authorized = true;
+	}
+	
+	datum_socket_send_string_to_client(c, s);
 
 	return 0;
 }