libtouchstone.cc

#include "libtouchstone.h"
#include "utils.h"
#include "sso.h"
#include <curl/curl.h>

namespace libtouchstone {

cpr::Session session(const char* cookie_file) {
    cpr::Session s;
    s.SetUserAgent("Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/117.0");
    auto curlHolder = s.GetCurlHolder();
    curl_easy_setopt(curlHolder->handle, CURLOPT_COOKIEFILE, cookie_file);
    curl_easy_setopt(curlHolder->handle, CURLOPT_COOKIEJAR, cookie_file);
    return s;
}

cpr::Response authenticate(cpr::Session& s, const char* url, const char* username,
                           const char* password, const AuthOptions& opts) {
    vlog(opts, "Authenticating to %s", url);

    // Make an initial request
    s.SetUrl(cpr::Url{url});
    cpr::Response r = s.Get();
    if (r.error) return r;

    std::string effective_url = r.url.str();

    // Check if already authenticated (cookies valid)
    if (!contains(effective_url, "idp.mit.edu") && !contains(effective_url, "okta.mit.edu")) {
        vlog(opts, "libtouchstone: already authenticated (cookies valid)");
        return r;
    }

    // SSO redirect (cookies valid but need redirect)
    if (contains(effective_url, "idp.mit.edu/idp/profile/SAML2")) {
        vlog(opts, "libtouchstone: cookies valid, performing SSO redirect");
        return perform_final_idp_redirect(s, r.text, opts);
    }

    // Okta flow (cookies invalid or slightly stale)
    if (contains(effective_url, "okta.mit.edu/app")) {
        // When cookies are slightly stale, Okta may just show an interstitial
        // page with a SAML form instead of the full login page with oktaData.
        if (contains(r.text, "SAMLResponse")) {
            vlog(opts, "libtouchstone: sent directly to SAML form");
            return perform_final_idp_redirect(s, r.text, opts);
        }
        vlog(opts, "libtouchstone: performing Okta flow");
        return perform_okta(s, r.text, username, password, opts);
    }

    return make_error(OKTA_FLOW_ERROR, "Unknown authentication state");
}

}  // namespace libtouchstone