106 lines
5.3 KiB
C++
106 lines
5.3 KiB
C++
#pragma once
|
|
|
|
#include "rublon/bits.hpp"
|
|
#include "rublon/configuration.hpp"
|
|
#include <rublon/error.hpp>
|
|
#include <rublon/pam_action.hpp>
|
|
#include <rublon/utils.hpp>
|
|
|
|
namespace rublon {
|
|
class ErrorHandler {
|
|
public:
|
|
const Pam_t & pam;
|
|
const Configuration & config;
|
|
|
|
AuthenticationStatus printErrorDetails(const Error & error) {
|
|
log(LogLevel::Error, "Process interrupted by {%s::%s}", error.errorClassName(), error.categoryName());
|
|
if(error.is< RublonAuthenticationInterrupt >()) {
|
|
switch(error.get< RublonAuthenticationInterrupt >().errorClass) {
|
|
case RublonAuthenticationInterrupt::ErrorClass::UserBaypass:
|
|
return AuthenticationStatus::Action::Bypass;
|
|
case RublonAuthenticationInterrupt::ErrorClass::UserDenied:
|
|
pam.print("Access denied! Contact your administrator for more information");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case RublonAuthenticationInterrupt::ErrorClass::UserWaiting:
|
|
case RublonAuthenticationInterrupt::ErrorClass::UserPending:
|
|
pam.print(
|
|
"Your account is awaiting administrator's approval.\n"
|
|
"Contact your administrator and ask them to approve your account");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case RublonAuthenticationInterrupt::ErrorClass::UserNotFound:
|
|
return AuthenticationStatus::Action::Bypass;
|
|
}
|
|
}
|
|
|
|
if(error.is< MethodError >()) {
|
|
switch(error.get< MethodError >().errorClass) {
|
|
case MethodError::ErrorClass::BadMethod:
|
|
return AuthenticationStatus::Action::Denied;
|
|
case MethodError::ErrorClass::BadUserInput:
|
|
return AuthenticationStatus::Action::Denied;
|
|
case MethodError::ErrorClass::NoMethodAvailable:
|
|
return AuthenticationStatus::Action::Denied;
|
|
}
|
|
}
|
|
|
|
if(error.is< ConnectionError >()) {
|
|
if(config.failMode == FailMode::deny) {
|
|
pam.print("Incorrect response from the Rublon API, user bypassed");
|
|
return AuthenticationStatus::Action::Bypass;
|
|
} else {
|
|
pam.print("Incorrect response from the Rublon API, user access denied");
|
|
return AuthenticationStatus::Action::Denied;
|
|
}
|
|
}
|
|
|
|
if(error.is< CoreHandlerError >()) {
|
|
pam.print("Something went wrong and authentication could not be completed, contact your administrator");
|
|
return AuthenticationStatus::Action::Denied;
|
|
}
|
|
|
|
if(error.is< WerificationError >()) {
|
|
switch(error.get< WerificationError >().errorClass) {
|
|
case WerificationError::ErrorClass::PasscodeException:
|
|
pam.print(R"(Incorrect passcode)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case WerificationError::ErrorClass::BadInput:
|
|
pam.print(R"(Ensure that the Secret Key is correct.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case WerificationError::SecurityKeyException:
|
|
pam.print(R"(Ensure that the Secret Key is correct.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case WerificationError::TooManyRequestsException:
|
|
pam.print(R"(Too many attempts.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case WerificationError::SendPushException:
|
|
pam.print(R"(Rublon failed to reach authenticator app)");
|
|
break;
|
|
}
|
|
}
|
|
|
|
if(error.is< RublonCheckApplicationException >()) {
|
|
switch(error.get< RublonCheckApplicationException >().errorClass) {
|
|
case RublonCheckApplicationException::ErrorClass::ApplicationNotFoundException:
|
|
log(LogLevel::Error, R"(Could not find the application in the Rublon Admin Console.)");
|
|
log(LogLevel::Error, R"(Ensure that the application exists and the SystemToken is correct.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case RublonCheckApplicationException::ErrorClass::InvalidSignatureException:
|
|
log(LogLevel::Error, R"(Could not verify the signature.)");
|
|
log(LogLevel::Error, R"(Ensure that the Secret Key is correct.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case RublonCheckApplicationException::ErrorClass::UnsupportedVersionException:
|
|
log(LogLevel::Error, R"(The provided version of the app is unsupported.)");
|
|
log(LogLevel::Error, R"(Try changing the app version.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
case RublonCheckApplicationException::MissingFieldException:
|
|
log(LogLevel::Error, R"(The provided version of the app is unsupported.)");
|
|
log(LogLevel::Error, R"(Try changing the app version.)");
|
|
return AuthenticationStatus::Action::Denied;
|
|
}
|
|
}
|
|
|
|
return AuthenticationStatus::Action::Denied;
|
|
}
|
|
};
|
|
} // namespace rublon
|