bots

Documentation

Overview

Package bots implements the CONIKS account verification protocol for first-party identity providers.

Many communication services provide user identifiers for their users (e.g. Twitter, XMPP servers), but do not provide end-to-end encryption by default. Users wishing to communicate securely often opt to use a third-party end-to-end encrypted communication service, which allows them to connect their first-party account.

bots provides such third-party secure communication services that use CONIKS for key management with a mechanism for ensuring that the first-party usernames registered with the CONIKS key directory belong to a legitimate first-party account. More specifically, bots provides registration proxies which verify that each first-party username belongs to a corresponding first-party account before forwarding the new registration to the third-party CONIKS server.

CONIKS Bots

This module provides an account verification bot interface that can be used to implement a CONIKS registration proxy for any first-party identity provider.

Twitter Bot

This module provides a registration proxy for Twitter accounts that implements the CONIKS account verification Bot interface.

Index

• func SendRequestToCONIKS(addr string, msg []byte) ([]byte, error)
• type Bot
  • func NewTwitterBot(conf *TwitterConfig) (Bot, error)
• type TwitterBot
  • func (bot *TwitterBot) HandleRegistration(username string, msg []byte) string
  • func (bot *TwitterBot) Run()
  • func (bot *TwitterBot) Stop()
• type TwitterConfig
  • func NewTwitterConfig(file, encoding, addr, handle string, oauth TwitterOAuth) *TwitterConfig
  • func (conf *TwitterConfig) GetPath() string
  • func (conf *TwitterConfig) Load(file, encoding string) error
  • func (conf *TwitterConfig) Save() error
• type TwitterOAuth

Functions

func SendRequestToCONIKS

func SendRequestToCONIKS(addr string, msg []byte) ([]byte, error)

SendRequestToCONIKS forwards a given msg to the CONIKS server listening at the named Unix socket addr. SendRequestToCONIKS, therefore, assumes that the registration proxy runs on the same host OS as the CONIKS server.

Types

type Bot

type Bot interface {
	HandleRegistration(string, []byte) string
	Run()
	Stop()
}

A Bot is a CONIKS registration proxy that verifies the authenticity of a user account with an identity provider (i.e. communication service that hands out service-specific user identifiers).

func NewTwitterBot

func NewTwitterBot(conf *TwitterConfig) (Bot, error)

NewTwitterBot constructs a new account verification bot for Twitter accounts that implements the Bot interface.

NewTwitterBot checks that the CONIKS key server is live, and authenticates the bot's Twitter client via OAuth. If any of these steps fail, NewTwitterBot returns a (nil, error) tuple. Otherwise, it returns a TwitterBot struct with the appropriate values obtained during the setup.

type TwitterBot

type TwitterBot struct {
	// contains filtered or unexported fields
}

A TwitterBot is an account verification bot for CONIKS clients registering Twitter usernames with a CONIKS key server.

A TwitterBot maintains information about a twitter client and stream, the address of its corresponding CONIKS server, and its reserved Twitter handle.

func (*TwitterBot) HandleRegistration

func (bot *TwitterBot) HandleRegistration(username string, msg []byte) string

HandleRegistration verifies the authenticity of a CONIKS registration request msg for a Twitter user, and forwards this request to the bot's corresponding CONIKS key server if the Twitter account for username is valid.

HandleRegistration() validates a registration request sent by a CONIKS client on behalf of the Twitter user via Twitter DM. It does so by comparing the username indicated in the request with the Twitter handle which sent the DM. HandleRegistration() forwards the registration request to the CONIKS server via SendRequestToCONIKS() if username matches request.Username, and returns the server's response as a string. See https://godoc.org/github.com/coniks-sys/coniks-go/protocol/#ConiksDirectory.Register for details on the possible server responses.

func (*TwitterBot) Run

func (bot *TwitterBot) Run()

Run implements the main functionality of a Twitter registration proxy. It listens for a Twitter direct message (DM) sent to the bot's reserved handle and calls HandleRegistration() upon receiving a valid DM sent by a CONIKS client connected to a Twitter account. The result of HandleRegistration() is returned to the CONIKS client via DM.

func (*TwitterBot) Stop

func (bot *TwitterBot) Stop()

Stop closes the bot's open stream through which it communicates with Twitter.

type TwitterConfig

type TwitterConfig struct {
	*application.CommonConfig
	CONIKSAddress string `toml:"coniks_address"`
	TwitterOAuth  `toml:"twitter_oauth"`
	Handle        string `toml:"twitter_bot_handle"`
}

A TwitterConfig contains the address of the named UNIX socket through which the bot and the CONIKS server communicate, the OAuth information needed to authenticate the bot with Twitter, and the bot's reserved Twitter handle. These values are specified in a configuration file, which is read at initialization time.

func NewTwitterConfig

func NewTwitterConfig(file, encoding, addr, handle string,
	oauth TwitterOAuth) *TwitterConfig

NewTwitterConfig initializes a new Twitter registration bot configuration at the given file path, with the config encoding, server address, Twitter handle, OAuth credentials.

func (*TwitterConfig) GetPath

func (conf *TwitterConfig) GetPath() string

Path returns the Twitter configuration's file path.

func (*TwitterConfig) Load

func (conf *TwitterConfig) Load(file, encoding string) error

Load initializes a Twitter registration proxy configuration at the given file path using the given encoding.

func (*TwitterConfig) Save

func (conf *TwitterConfig) Save() error

Save writes a Twitter registration proxy configuration using the given encoding.

type TwitterOAuth

type TwitterOAuth struct {
	ConsumerKey    string
	ConsumerSecret string
	AccessToken    string
	AccessSecret   string
}

A TwitterOAuth contains the four secret values needed to authenticate the bot with Twitter. These values are unique to each application that uses the Twitter API to access an account's feed and direct messages, and must be generated via Twitter's developer portal.