Skip to content
GitLab
Menu
Projects
Groups
Snippets
Loading...
Help
Help
Support
Community forum
Keyboard shortcuts
?
Submit feedback
Contribute to GitLab
Sign in / Register
Toggle navigation
Menu
Open sidebar
ruanhaishen
Acme.Sh
Commits
7d503322
Unverified
Commit
7d503322
authored
Jun 11, 2023
by
neil
Committed by
GitHub
Jun 11, 2023
Browse files
Merge pull request #4412 from phedoreanu/bugfix/1984_hosting_csrftoken
dns_1984.hosting.sh: fix login with valid csrftoken
parents
f680ede9
0d047824
Changes
1
Hide whitespace changes
Inline
Side-by-side
dnsapi/dns_1984hosting.sh
View file @
7d503322
#!/usr/bin/env sh
#!/usr/bin/env sh
#This file name is "dns_1984hosting.sh"
#
This file name is "dns_1984hosting.sh"
#So, here must be a method dns_1984hosting_add()
#
So, here must be a method dns_1984hosting_add()
#Which will be called by acme.sh to add the txt record to your api system.
#
Which will be called by acme.sh to add the txt record to your api system.
#returns 0 means success, otherwise error.
#
returns 0 means success, otherwise error.
#Author: Adrian Fedoreanu
#
Author: Adrian Fedoreanu
#Report Bugs here: https://github.com/acmesh-official/acme.sh
#
Report Bugs here: https://github.com/acmesh-official/acme.sh
# or here... https://github.com/acmesh-official/acme.sh/issues/2851
# or here... https://github.com/acmesh-official/acme.sh/issues/2851
#
########
Public functions #####################
######## Public functions #####################
# Export 1984HOSTING username and password in following variables
# Export 1984HOSTING username and password in following variables
#
#
# One984HOSTING_Username=username
# One984HOSTING_Username=username
# One984HOSTING_Password=password
# One984HOSTING_Password=password
#
#
# sessionid cookie is saved in ~/.acme.sh/account.conf
# username/password and csrftoken/sessionid cookies are saved in ~/.acme.sh/account.conf
# username/password need to be set only when changed.
#Usage: dns_1984hosting_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
# Usage: dns_1984hosting_add _acme-challenge.www.domain.com "XKrxpRBosdIKFzxW_CT3KLZNf6q0HG9i01zxXp5CPBs"
# Add a text record.
dns_1984hosting_add
()
{
dns_1984hosting_add
()
{
fulldomain
=
$1
fulldomain
=
$1
txtvalue
=
$2
txtvalue
=
$2
_info
"Add TXT record using 1984Hosting"
_info
"Add TXT record using 1984Hosting
.
"
_debug fulldomain
"
$fulldomain
"
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
_debug txtvalue
"
$txtvalue
"
if
!
_1984hosting_login
;
then
if
!
_1984hosting_login
;
then
_err
"1984Hosting login failed for user
$One984HOSTING_Username
. Check
$HTTP_HEADER
file"
_err
"1984Hosting login failed for user
$One984HOSTING_Username
. Check
$HTTP_HEADER
file
.
"
return
1
return
1
fi
fi
_debug
"First detect the root zone"
_debug
"First detect the root zone
.
"
if
!
_get_root
"
$fulldomain
"
;
then
if
!
_get_root
"
$fulldomain
"
;
then
_err
"
i
nvalid domain
"
"
$fulldomain
"
_err
"
I
nvalid domain
'
$fulldomain
'.
"
return
1
return
1
fi
fi
_debug _sub_domain
"
$_sub_domain
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_debug _domain
"
$_domain
"
_debug
"Add TXT record
$fulldomain
with value '
$txtvalue
'"
_debug
"Add TXT record
$fulldomain
with value '
$txtvalue
'
.
"
value
=
"
$(
printf
'%s'
"
$txtvalue
"
| _url_encode
)
"
value
=
"
$(
printf
'%s'
"
$txtvalue
"
| _url_encode
)
"
url
=
"https://1984.hosting/domains/entry/"
url
=
"https://1984.hosting/domains/entry/"
...
@@ -53,93 +53,97 @@ dns_1984hosting_add() {
...
@@ -53,93 +53,97 @@ dns_1984hosting_add() {
_debug2 postdata
"
$postdata
"
_debug2 postdata
"
$postdata
"
_authpost
"
$postdata
"
"
$url
"
_authpost
"
$postdata
"
"
$url
"
response
=
"
$(
echo
"
$_response
"
| _normalizeJson
)
"
if
_contains
"
$_response
"
'"haserrors": true'
;
then
_debug2 response
"
$response
"
_err
"1984Hosting failed to add TXT record for
$_sub_domain
bad RC from _post."
if
_contains
"
$response
"
'"haserrors": true'
;
then
_err
"1984Hosting failed to add TXT record for
$_sub_domain
bad RC from _post"
return
1
return
1
elif
_contains
"
$response
"
"html>"
;
then
elif
_contains
"
$
_
response
"
"html>"
;
then
_err
"1984Hosting failed to add TXT record for
$_sub_domain
. Check
$HTTP_HEADER
file"
_err
"1984Hosting failed to add TXT record for
$_sub_domain
. Check
$HTTP_HEADER
file
.
"
return
1
return
1
elif
_contains
"
$response
"
'"auth": false'
;
then
elif
_contains
"
$
_
response
"
'"auth": false'
;
then
_err
"1984Hosting failed to add TXT record for
$_sub_domain
. Invalid or expired cookie"
_err
"1984Hosting failed to add TXT record for
$_sub_domain
. Invalid or expired cookie
.
"
return
1
return
1
fi
fi
_info
"Added acme challenge TXT record for
$fulldomain
at 1984Hosting"
_info
"Added acme challenge TXT record for
$fulldomain
at 1984Hosting
.
"
return
0
return
0
}
}
#Usage: fulldomain txtvalue
#
Usage: fulldomain txtvalue
#Remove the txt record after validation.
#
Remove the txt record after validation.
dns_1984hosting_rm
()
{
dns_1984hosting_rm
()
{
fulldomain
=
$1
fulldomain
=
$1
txtvalue
=
$2
txtvalue
=
$2
_info
"Delete TXT record using 1984Hosting"
_info
"Delete TXT record using 1984Hosting
.
"
_debug fulldomain
"
$fulldomain
"
_debug fulldomain
"
$fulldomain
"
_debug txtvalue
"
$txtvalue
"
_debug txtvalue
"
$txtvalue
"
if
!
_1984hosting_login
;
then
if
!
_1984hosting_login
;
then
_err
"1984Hosting login failed for user
$One984HOSTING_Username
. Check
$HTTP_HEADER
file"
_err
"1984Hosting login failed for user
$One984HOSTING_Username
. Check
$HTTP_HEADER
file
.
"
return
1
return
1
fi
fi
_debug
"First detect the root zone"
_debug
"First detect the root zone
.
"
if
!
_get_root
"
$fulldomain
"
;
then
if
!
_get_root
"
$fulldomain
"
;
then
_err
"
i
nvalid domain
"
"
$fulldomain
"
_err
"
I
nvalid domain
'
$fulldomain
'.
"
return
1
return
1
fi
fi
_debug _sub_domain
"
$_sub_domain
"
_debug _sub_domain
"
$_sub_domain
"
_debug _domain
"
$_domain
"
_debug _domain
"
$_domain
"
_debug
"Delete
$fulldomain
TXT record"
_debug
"Delete
$fulldomain
TXT record
.
"
url
=
"https://1984.hosting/domains"
url
=
"https://1984.hosting/domains"
if
!
_get_zone_id
"
$url
"
"
$_domain
"
;
then
if
!
_get_zone_id
"
$url
"
"
$_domain
"
;
then
_err
"
i
nvalid zone
"
"
$_domain
"
_err
"
I
nvalid zone
'
$_domain
'.
"
return
1
return
1
fi
fi
_htmlget
"
$url
/
$_zone_id
"
"
$txtvalue
"
_htmlget
"
$url
/
$_zone_id
"
"
$txtvalue
"
_debug2 _response
"
$_response
"
entry_id
=
"
$(
echo
"
$_response
"
| _egrep_o
'entry_[0-9]+'
|
sed
's/entry_//'
)
"
entry_id
=
"
$(
echo
"
$_response
"
| _egrep_o
'entry_[0-9]+'
|
sed
's/entry_//'
)
"
_debug2 entry_id
"
$entry_id
"
_debug2 entry_id
"
$entry_id
"
if
[
-z
"
$entry_id
"
]
;
then
if
[
-z
"
$entry_id
"
]
;
then
_err
"Error getting TXT entry_id for
$1
"
_err
"Error getting TXT entry_id for
$1
.
"
return
1
return
1
fi
fi
_authpost
"entry=
$entry_id
"
"
$url
/delentry/"
_authpost
"entry=
$entry_id
"
"
$url
/delentry/"
response
=
"
$(
echo
"
$_response
"
| _normalizeJson
)
"
if
!
_contains
"
$_response
"
'"ok": true'
;
then
_debug2 response
"
$response
"
_err
"1984Hosting failed to delete TXT record for
$entry_id
bad RC from _post."
if
!
_contains
"
$response
"
'"ok": true'
;
then
_err
"1984Hosting failed to delete TXT record for
$entry_id
bad RC from _post"
return
1
return
1
fi
fi
_info
"Deleted acme challenge TXT record for
$fulldomain
at 1984Hosting"
_info
"Deleted acme challenge TXT record for
$fulldomain
at 1984Hosting
.
"
return
0
return
0
}
}
#################### Private functions below ##################################
#################### Private functions below ##################################
# usage: _1984hosting_login username password
# returns 0 success
_1984hosting_login
()
{
_1984hosting_login
()
{
if
!
_check_credentials
;
then return
1
;
fi
if
!
_check_credentials
;
then return
1
;
fi
if
_check_cookies
;
then
if
_check_cookies
;
then
_debug
"Already logged in"
_debug
"Already logged in
.
"
return
0
return
0
fi
fi
_debug
"Login to 1984Hosting as user
$One984HOSTING_Username
"
_debug
"Login to 1984Hosting as user
$One984HOSTING_Username
.
"
username
=
$(
printf
'%s'
"
$One984HOSTING_Username
"
| _url_encode
)
username
=
$(
printf
'%s'
"
$One984HOSTING_Username
"
| _url_encode
)
password
=
$(
printf
'%s'
"
$One984HOSTING_Password
"
| _url_encode
)
password
=
$(
printf
'%s'
"
$One984HOSTING_Password
"
| _url_encode
)
url
=
"https://1984.hosting/accounts/checkuserauth/"
url
=
"https://1984.hosting/accounts/checkuserauth/"
_get
"https://1984.hosting/accounts/login/"
|
grep
"csrfmiddlewaretoken"
csrftoken
=
"
$(
grep
-i
'^set-cookie:'
"
$HTTP_HEADER
"
| _egrep_o
'csrftoken=[^;]*;'
|
tr
-d
';'
)
"
sessionid
=
"
$(
grep
-i
'^set-cookie:'
"
$HTTP_HEADER
"
| _egrep_o
'sessionid=[^;]*;'
|
tr
-d
';'
)
"
if
[
-z
"
$csrftoken
"
]
||
[
-z
"
$sessionid
"
]
;
then
_err
"One or more cookies are empty: '
$csrftoken
', '
$sessionid
'."
return
1
fi
export
_H1
=
"Cookie:
$csrftoken
;
$sessionid
"
export
_H2
=
"Referer: https://1984.hosting/accounts/login/"
csrf_header
=
$(
echo
"
$csrftoken
"
|
sed
's/csrftoken=//'
| _head_n 1
)
export
_H3
=
"X-CSRFToken:
$csrf_header
"
response
=
"
$(
_post
"username=
$username
&password=
$password
&otpkey="
$url
)
"
response
=
"
$(
_post
"username=
$username
&password=
$password
&otpkey="
$url
)
"
response
=
"
$(
echo
"
$response
"
| _normalizeJson
)
"
response
=
"
$(
echo
"
$response
"
| _normalizeJson
)
"
_debug2 response
"
$response
"
_debug2 response
"
$response
"
...
@@ -149,6 +153,8 @@ _1984hosting_login() {
...
@@ -149,6 +153,8 @@ _1984hosting_login() {
One984HOSTING_CSRFTOKEN_COOKIE
=
"
$(
grep
-i
'^set-cookie:'
"
$HTTP_HEADER
"
| _egrep_o
'csrftoken=[^;]*;'
|
tr
-d
';'
)
"
One984HOSTING_CSRFTOKEN_COOKIE
=
"
$(
grep
-i
'^set-cookie:'
"
$HTTP_HEADER
"
| _egrep_o
'csrftoken=[^;]*;'
|
tr
-d
';'
)
"
export
One984HOSTING_SESSIONID_COOKIE
export
One984HOSTING_SESSIONID_COOKIE
export
One984HOSTING_CSRFTOKEN_COOKIE
export
One984HOSTING_CSRFTOKEN_COOKIE
_saveaccountconf_mutable One984HOSTING_Username
"
$One984HOSTING_Username
"
_saveaccountconf_mutable One984HOSTING_Password
"
$One984HOSTING_Password
"
_saveaccountconf_mutable One984HOSTING_SESSIONID_COOKIE
"
$One984HOSTING_SESSIONID_COOKIE
"
_saveaccountconf_mutable One984HOSTING_SESSIONID_COOKIE
"
$One984HOSTING_SESSIONID_COOKIE
"
_saveaccountconf_mutable One984HOSTING_CSRFTOKEN_COOKIE
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
_saveaccountconf_mutable One984HOSTING_CSRFTOKEN_COOKIE
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
return
0
return
0
...
@@ -157,9 +163,13 @@ _1984hosting_login() {
...
@@ -157,9 +163,13 @@ _1984hosting_login() {
}
}
_check_credentials
()
{
_check_credentials
()
{
One984HOSTING_Username
=
"
${
One984HOSTING_Username
:-
$(
_readaccountconf_mutable One984HOSTING_Username
)
}
"
One984HOSTING_Password
=
"
${
One984HOSTING_Password
:-
$(
_readaccountconf_mutable One984HOSTING_Password
)
}
"
if
[
-z
"
$One984HOSTING_Username
"
]
||
[
-z
"
$One984HOSTING_Password
"
]
;
then
if
[
-z
"
$One984HOSTING_Username
"
]
||
[
-z
"
$One984HOSTING_Password
"
]
;
then
One984HOSTING_Username
=
""
One984HOSTING_Username
=
""
One984HOSTING_Password
=
""
One984HOSTING_Password
=
""
_clearaccountconf_mutable One984HOSTING_Username
_clearaccountconf_mutable One984HOSTING_Password
_err
"You haven't specified 1984Hosting username or password yet."
_err
"You haven't specified 1984Hosting username or password yet."
_err
"Please export as One984HOSTING_Username / One984HOSTING_Password and try again."
_err
"Please export as One984HOSTING_Username / One984HOSTING_Password and try again."
return
1
return
1
...
@@ -171,42 +181,43 @@ _check_cookies() {
...
@@ -171,42 +181,43 @@ _check_cookies() {
One984HOSTING_SESSIONID_COOKIE
=
"
${
One984HOSTING_SESSIONID_COOKIE
:-
$(
_readaccountconf_mutable One984HOSTING_SESSIONID_COOKIE
)
}
"
One984HOSTING_SESSIONID_COOKIE
=
"
${
One984HOSTING_SESSIONID_COOKIE
:-
$(
_readaccountconf_mutable One984HOSTING_SESSIONID_COOKIE
)
}
"
One984HOSTING_CSRFTOKEN_COOKIE
=
"
${
One984HOSTING_CSRFTOKEN_COOKIE
:-
$(
_readaccountconf_mutable One984HOSTING_CSRFTOKEN_COOKIE
)
}
"
One984HOSTING_CSRFTOKEN_COOKIE
=
"
${
One984HOSTING_CSRFTOKEN_COOKIE
:-
$(
_readaccountconf_mutable One984HOSTING_CSRFTOKEN_COOKIE
)
}
"
if
[
-z
"
$One984HOSTING_SESSIONID_COOKIE
"
]
||
[
-z
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
]
;
then
if
[
-z
"
$One984HOSTING_SESSIONID_COOKIE
"
]
||
[
-z
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
]
;
then
_debug
"No cached cookie(s) found"
_debug
"No cached cookie(s) found
.
"
return
1
return
1
fi
fi
_authget
"https://1984.hosting/accounts/loginstatus/"
_authget
"https://1984.hosting/accounts/loginstatus/"
if
_contains
"
$response
"
'"ok": true'
;
then
if
_contains
"
$
_
response
"
'"ok": true'
;
then
_debug
"Cached cookies still valid"
_debug
"Cached cookies still valid
.
"
return
0
return
0
fi
fi
_debug
"Cached cookies no longer valid"
_debug
"Cached cookies no longer valid. Clearing cookies."
One984HOSTING_SESSIONID_COOKIE
=
""
One984HOSTING_SESSIONID_COOKIE
=
""
One984HOSTING_CSRFTOKEN_COOKIE
=
""
One984HOSTING_CSRFTOKEN_COOKIE
=
""
_
save
accountconf_mutable One984HOSTING_SESSIONID_COOKIE
"
$One984HOSTING_SESSIONID_COOKIE
"
_
clear
accountconf_mutable One984HOSTING_SESSIONID_COOKIE
_
save
accountconf_mutable One984HOSTING_CSRFTOKEN_COOKIE
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
_
clear
accountconf_mutable One984HOSTING_CSRFTOKEN_COOKIE
return
1
return
1
}
}
#_acme-challenge.www.domain.com
#
_acme-challenge.www.domain.com
#
r
eturns
#
R
eturns
# _sub_domain=_acme-challenge.www
#
_sub_domain=_acme-challenge.www
# _domain=domain.com
#
_domain=domain.com
_get_root
()
{
_get_root
()
{
domain
=
"
$1
"
domain
=
"
$1
"
i
=
1
i
=
1
p
=
1
p
=
1
while
true
;
do
while
true
;
do
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
$i
-100
)
h
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
"
$i
"
-100
)
# not valid
if
[
-z
"
$h
"
]
;
then
if
[
-z
"
$h
"
]
;
then
#not valid
return
1
return
1
fi
fi
_authget
"https://1984.hosting/domains/soacheck/?zone=
$h
&nameserver=ns0.1984.is."
_authget
"https://1984.hosting/domains/soacheck/?zone=
$h
&nameserver=ns0.1984.is."
if
_contains
"
$_response
"
"serial"
&&
!
_contains
"
$_response
"
"null"
;
then
if
_contains
"
$_response
"
"serial"
&&
!
_contains
"
$_response
"
"null"
;
then
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
$p
)
_sub_domain
=
$(
printf
"%s"
"
$domain
"
|
cut
-d
.
-f
1-
"
$p
"
)
_domain
=
"
$h
"
_domain
=
"
$h
"
return
0
return
0
fi
fi
...
@@ -216,46 +227,47 @@ _get_root() {
...
@@ -216,46 +227,47 @@ _get_root() {
return
1
return
1
}
}
#
u
sage: _get_zone_id url domain.com
#
U
sage: _get_zone_id url domain.com
#
r
eturns zone id for domain.com
#
R
eturns zone id for domain.com
_get_zone_id
()
{
_get_zone_id
()
{
url
=
$1
url
=
$1
domain
=
$2
domain
=
$2
_htmlget
"
$url
"
"
$domain
"
_htmlget
"
$url
"
"
$domain
"
_debug2 _response
"
$_response
"
_zone_id
=
"
$(
echo
"
$_response
"
| _egrep_o
'zone\/[0-9]+'
| _head_n 1
)
"
_zone_id
=
"
$(
echo
"
$_response
"
| _egrep_o
'zone\/[0-9]+'
| _head_n 1
)
"
_debug2 _zone_id
"
$_zone_id
"
_debug2 _zone_id
"
$_zone_id
"
if
[
-z
"
$_zone_id
"
]
;
then
if
[
-z
"
$_zone_id
"
]
;
then
_err
"Error getting _zone_id for
$2
"
_err
"Error getting _zone_id for
$2
.
"
return
1
return
1
fi
fi
return
0
return
0
}
}
#
a
dd extra headers to request
#
A
dd extra headers to request
_authget
()
{
_authget
()
{
export
_H1
=
"Cookie:
$One984HOSTING_CSRFTOKEN_COOKIE
;
$One984HOSTING_SESSIONID_COOKIE
"
export
_H1
=
"Cookie:
$One984HOSTING_CSRFTOKEN_COOKIE
;
$One984HOSTING_SESSIONID_COOKIE
"
_response
=
$(
_get
"
$1
"
| _normalizeJson
)
_response
=
$(
_get
"
$1
"
| _normalizeJson
)
_debug2 _response
"
$_response
"
_debug2 _response
"
$_response
"
}
}
#
t
runcate huge HTML response
#
T
runcate huge HTML response
#
e
cho: Argument list too long
#
E
cho: Argument list too long
_htmlget
()
{
_htmlget
()
{
export
_H1
=
"Cookie:
$One984HOSTING_CSRFTOKEN_COOKIE
;
$One984HOSTING_SESSIONID_COOKIE
"
export
_H1
=
"Cookie:
$One984HOSTING_CSRFTOKEN_COOKIE
;
$One984HOSTING_SESSIONID_COOKIE
"
_response
=
$(
_get
"
$1
"
|
grep
"
$2
"
)
_response
=
$(
_get
"
$1
"
|
grep
"
$2
"
)
if
_contains
"
$_response
"
"@
$2
"
;
then
if
_contains
"
$_response
"
"@
$2
"
;
then
_response
=
$(
echo
"
$_response
"
|
grep
-v
"[@]"
| _head_n 1
)
_response
=
$(
echo
"
$_response
"
|
grep
-v
"[@]"
| _head_n 1
)
fi
fi
_debug2 _response
"
$_response
"
}
}
#
a
dd extra headers to request
#
A
dd extra headers to request
_authpost
()
{
_authpost
()
{
url
=
"https://1984.hosting/domains"
url
=
"https://1984.hosting/domains"
_get_zone_id
"
$url
"
"
$_domain
"
_get_zone_id
"
$url
"
"
$_domain
"
csrf_header
=
"
$(
echo
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
| _egrep_o
"=[^=][0-9a-zA-Z]*"
|
tr
-d
"="
)
"
csrf_header
=
"
$(
echo
"
$One984HOSTING_CSRFTOKEN_COOKIE
"
| _egrep_o
"=[^=][0-9a-zA-Z]*"
|
tr
-d
"="
)
"
export
_H1
=
"Cookie:
$One984HOSTING_CSRFTOKEN_COOKIE
;
$One984HOSTING_SESSIONID_COOKIE
"
export
_H1
=
"Cookie:
$One984HOSTING_CSRFTOKEN_COOKIE
;
$One984HOSTING_SESSIONID_COOKIE
"
export
_H2
=
"Referer: https://1984.hosting/domains/
$_zone_id
"
export
_H2
=
"Referer: https://1984.hosting/domains/
$_zone_id
"
export
_H3
=
"X-CSRFToken:
$csrf_header
"
export
_H3
=
"X-CSRFToken:
$csrf_header
"
_response
=
$(
_post
"
$1
"
"
$2
"
)
_response
=
"
$(
_post
"
$1
"
"
$2
"
| _normalizeJson
)
"
_debug2 _response
"
$_response
"
}
}
Write
Preview
Markdown
is supported
0%
Try again
or
attach a new file
.
Attach a file
Cancel
You are about to add
0
people
to the discussion. Proceed with caution.
Finish editing this message first!
Cancel
Please
register
or
sign in
to comment