Checkin of auth rewrite progress.

Added a new DB library for handling sessions.
New update SQL file for database changes.
Added a line to the global config file to set a global salt. It is separate
from the cookie_key because it is much more important that it not be changed.

3 files changed, 58 insertions, 0 deletions

diff --git a/data/global.pl b/data/global.pl
index 7f3ab7a2..a1835d0a 100644
--- a/data/global.pl
+++ b/data/global.pl
@@ -21,6 +21,7 @@ our %S = (%S,
   skin_default    => 'angel',
   cookie_domain   => '.vndb.org',
   cookie_key      => 'any-private-string-here',
+  global_salt     => 'another-private-string-here',
   source_url      => 'http://git.blicky.net/vndb.git/?h=master',
   admin_email     => 'contact@vndb.org',
   sharedmem_key   => 'VNDB',
diff --git a/lib/VNDB/DB/Sessions.pm b/lib/VNDB/DB/Sessions.pm
new file mode 100644
index 00000000..031c5ac3
--- /dev/null
+++ b/lib/VNDB/DB/Sessions.pm
@@ -0,0 +1,43 @@
+
+package VNDB::DB::Sessions;
+
+use strict;
+use warnings;
+use Exporter 'import';
+
+our @EXPORT = qw| dbSessionAdd dbSessionDel dbSessionCheck |;
+
+
+# uid, 40 character session token, expiration time (int)
+sub dbSessionAdd {
+  my($s, @o) = @_;
+  $s->dbExec(q|INSERT INTO sessions (uid, token, expiration) VALUES(?, ?, ?)|,
+    @o[0..2]);
+}
+
+
+# Deletes session(s) from the database
+# If no token is supplied, all sessions for the uid are destroyed
+# uid, token (optional)
+sub dbSessionDel {
+  my($s, @o) = @_;
+  if (defined $o[1]) {
+    $s->dbExec(q|DELETE FROM sessions WHERE uid = ? AND token = ?|,
+      @o[0..1]);
+  } else {
+    $s->dbExec(q|DELETE FROM sessions WHERE uid = ?|,
+      $o[0]);
+  }
+}
+
+
+# Queries the database for the validity of a session
+# Returns 1 if corresponding session found, 0 if not
+# uid, token
+sub dbSessionCheck {
+  my($s, @o) = @_;
+  return $s->dbRow(q|SELECT count(uid) AS count FROM sessions WHERE uid = ? AND token = ? LIMIT 1|, @o);
+}
+
+
+1;
diff --git a/util/updates/update_2.6.sql b/util/updates/update_2.6.sql
new file mode 100644
index 00000000..6d38c8b8
--- /dev/null
+++ b/util/updates/update_2.6.sql
@@ -0,0 +1,14 @@
+
+-- Create table for session data storage
+
+CREATE TABLE sessions (
+    uid integer NOT NULL REFERENCES users(id) ON UPDATE CASCADE ON DELETE CASCADE,
+    token character(40) NOT NULL,
+    expiration bigint DEFAULT 0 NOT NULL,
+    PRIMARY KEY (uid, token)
+);
+
+-- Add column to users for salt storage
+
+ALTER TABLE users ADD COLUMN salt character(9) NOT NULL DEFAULT 0;
+