extensions/auth/nsAuthSSPI.h
author Matthew Noorenberghe <mozilla@noorenberghe.ca>
Sat, 20 Oct 2018 03:39:32 +0000
changeset 500732 a1db0baedde03d00e96ddd577b8d3672f115a726
parent 433749 1303bbfb017d0a7446b959c9fcbe5bb65f296950
child 502547 b3bf57d996a72f0a8843b85ec3e0379092a7bf87
permissions -rw-r--r--
Bug 1435871 - Implement a basic tab-modal dialog container for Payment Request. r=jaws Differential Revision: https://phabricator.services.mozilla.com/D7934

/* vim:set ts=4 sw=4 et cindent: */
/* This Source Code Form is subject to the terms of the Mozilla Public
 * License, v. 2.0. If a copy of the MPL was not distributed with this
 * file, You can obtain one at http://mozilla.org/MPL/2.0/. */

#ifndef nsAuthSSPI_h__
#define nsAuthSSPI_h__

#include "nsAuth.h"
#include "nsIAuthModule.h"
#include "nsString.h"

#include <windows.h>

#define SECURITY_WIN32 1
#include <ntsecapi.h>
#include <security.h>
#include <rpc.h>

// The nsNegotiateAuth class provides responses for the GSS-API Negotiate method
// as specified by Microsoft in draft-brezak-spnego-http-04.txt

// It can also be configured to talk raw NTLM.  This implementation of NTLM has
// the advantage of being able to access the user's logon credentials.  This
// implementation of NTLM should only be used for single-signon.  It should be
// avoided when authenticating over the internet since it may use a lower-grade
// version of password hashing depending on the version of Windows being used.

class nsAuthSSPI final : public nsIAuthModule
{
public:
    NS_DECL_ISUPPORTS
    NS_DECL_NSIAUTHMODULE

    explicit nsAuthSSPI(pType package = PACKAGE_TYPE_NEGOTIATE);

private:
    ~nsAuthSSPI();

    void Reset();

    typedef TimeStamp MS_TimeStamp;

private:
    nsresult MakeSN(const char *principal, nsCString &result);

    CredHandle   mCred;
    CtxtHandle   mCtxt;
    nsCString    mServiceName;
    uint32_t     mServiceFlags;
    uint32_t     mMaxTokenLen;
    pType        mPackage;
    nsString     mDomain;
    nsString     mUsername;
    nsString     mPassword;
    bool         mIsFirst;
    void*        mCertDERData;
    uint32_t     mCertDERLength;
};

#endif /* nsAuthSSPI_h__ */