public void HandleAuthLogonProof(AuthClass session, PacketReader data)
{
PacketWriter logonProof = new PacketWriter();
BigInteger a = data.ReadBytes(32);
BigInteger m1 = data.ReadBytes(20);
SRP.PublicEphemeralValueA = a;
if (!SRP.IsClientProofValid(m1))
{
return;
}
foreach (var b in SRP.SessionKey.GetBytes())
{
if (b < 0x10)
{
account.SessionKey += "0" + String.Format("{0:X}", b);
}
else
{
account.SessionKey += String.Format("{0:X}", b);
}
}
logonProof.WriteUInt8((byte)ClientLink.AuthLogonProof);
logonProof.WriteUInt8(0);
logonProof.WriteBytes(SRP.ServerSessionKeyProof.GetBytes(), 20);
logonProof.WriteUInt32(0x00800000);
logonProof.WriteUInt32(0);
logonProof.WriteUInt16(0);
//"UPDATE account SET sessionkey = ?, last_ip = ?, last_login = NOW(), locale = ?, failed_logins = 0 WHERE username = ?"
PreparedStatement stmt = DB.Auth.GetPreparedStatement(LoginStatements.Upd_LogonProof);
stmt.AddValue(0, account.SessionKey);
stmt.AddValue(1, account.LastIP);
stmt.AddValue(2, 0);//GetLocaleByName(_localizationName));
stmt.AddValue(3, account.Name);
DB.Auth.Execute(stmt);
Log.outInfo("Accepted Client Connection IP: {0}", clientSocket.LocalEndPoint);
session.Send(logonProof);
}
public void HandleAuthLogonChallenge(AuthClass session, PacketReader data)
{
data.Skip(10);
ClientBuild = data.ReadUInt16();
data.Skip(8);
account.Locale = data.ReadStringFromBytes(4);
data.Skip(4);
byte[] ip = new byte[4];
for (int i = 0; i < 4; ++i)
{
ip[i] = data.ReadUInt8();
}
account.LastIP = ip[0] + "." + ip[1] + "." + ip[2] + "." + ip[3];
StringBuilder nameBuilder = new StringBuilder();
byte nameLength = data.ReadUInt8();
char[] name = new char[nameLength];
for (int i = 0; i < nameLength; i++)
{
name[i] = data.ReadChar();
nameBuilder.Append(name[i]);
}
account.Name = nameBuilder.ToString().Trim(new char[] { '@' }).ToUpper();
// 0, 1, 2, 3, 4
//"SELECT a.sha_pass_hash, a.id, a.locked, a.last_ip, aa.gmlevel FROM account a LEFT JOIN account_access aa ON (a.id = aa.id) WHERE a.username = ?"
PreparedStatement stmt = DB.Auth.GetPreparedStatement(LoginStatements.Sel_LogonChallenge);
stmt.AddValue(0, account.Name);
SQLResult result = DB.Auth.Select(stmt);
PacketWriter logonChallenge = new PacketWriter();
logonChallenge.WriteUInt8((byte)ClientLink.AuthLogonChallenge);
logonChallenge.WriteUInt8(0);
if (result.Count != 0)
{
account.Id = result.Read <uint>(0, 1);
SRP = new SRP6(account.Name, result.Read <string>(0, 0).ToByteArray(), true);
logonChallenge.WriteUInt8((byte)AuthResults.Success);
logonChallenge.WriteBytes(SRP.PublicEphemeralValueB.GetBytes());
logonChallenge.WriteUInt8(1);
logonChallenge.WriteBytes(SRP.Generator.GetBytes());
logonChallenge.WriteUInt8(0x20);
logonChallenge.WriteBytes(SRP.Modulus.GetBytes());
logonChallenge.WriteBytes(SRP.Salt.GetBytes());
logonChallenge.WriteBytes(SRP6.RandomNumber(0x10).GetBytes());
// GMLevel
logonChallenge.WriteUInt8(0);
}
else
{
logonChallenge.WriteUInt8((byte)AuthResults.FailUnknownAccount);
}
session.Send(logonChallenge);
}