Allow password login

lib/node-sftp-s3.js

@@ -21,6 +21,7 @@ class SFTPS3Server extends EventEmitter {
     super();
     this.s3 = s3Instance;
     this.publicKeys = [];
+    this.passwordLogins = [];
     this.hostKeys = [];
     this.loggingEnabled = false;
   }
@@ -60,6 +61,19 @@ class SFTPS3Server extends EventEmitter {
     this._log(util.format('Added public key for username %s, path %s', username, path));
   }
 
+  addPasswordLogin(password, username, ns) {
+    var path = _path.normalize(username);
+    if(ns) {
+      path = _path.join(_path.normalize(ns), path);
+    }
+
+    while (path.indexOf('\\') >= 0)
+      path = path.replace('\\', '/');
+
+    this.passwordLogins.push({ password: password, username: username, path: path });
+    this._log(util.format('Added password login for username %s, path %s', username, path));
+  }
+
   /**
    * Remove the public key for a username
    *
@@ -73,6 +87,14 @@ class SFTPS3Server extends EventEmitter {
     });
   }
 
+  removePasswordLogin(username) {
+    const self = this;
+    _.remove(this.passwordLogins, (p) => {
+      self._log(util.format('Removed password login for username %s', username));
+      return p.username === username;
+    });
+  }
+
   /**
    * Remove all public keys
    */
@@ -81,6 +103,11 @@ class SFTPS3Server extends EventEmitter {
     this.publicKeys = [];
   }
 
+  removeAllPasswordLogins() {
+    this._log(util.format('Removed all password logins'));
+    this.passwordLogins = [];
+  }
+
   /**
    * Add a host key. You need at least one host key before you can start the server.
    *
@@ -106,36 +133,48 @@ class SFTPS3Server extends EventEmitter {
       hostKeys: this.hostKeys
     }, (client) => {
       var pubKey;
+      var remainingMethods = ['publickey', 'password'];
       client.on('error', (err) => {
         this.emit('client-error', { client: client, error: err });
       });
       client.on('authentication', (ctx) => {
-        if(ctx.method !== 'publickey') {
-          this._log('rejecting non-public-key authentication');
-          return ctx.reject(['publickey']);
-        }
-
-        pubKey = this._findKey(ctx.username, ctx.key);
-        if(!pubKey) {
-          this._log('public key not found');
-          return ctx.reject(['publickey not found']);
-        }
+        var supportedMethods = ['publickey', 'password'];
+
+        if(ctx.method === 'publickey') {
+          remainingMethods = ['password']
+          pubKey = this._findKey(ctx.username, ctx.key);
+          if(!pubKey) {
+            this._log('public key not found');
+            return ctx.reject(remainingMethods);
+          }
 
-        if(ctx.signature) {
-          var verifier = crypto.createVerify(ctx.sigAlgo);
-          verifier.update(ctx.blob);
-          if(verifier.verify(pubKey.key.publicOrig, ctx.signature)) {
-            this._log('signature verified');
-            return ctx.accept();
+          if(ctx.signature) {
+            var verifier = crypto.createVerify(ctx.sigAlgo);
+            verifier.update(ctx.blob);
+            if(verifier.verify(pubKey.key.publicOrig, ctx.signature)) {
+              this._log('signature verified');
+              return ctx.accept();
+            }
+            else {
+              this._log('signature rejected');
+              return ctx.reject(remainingMethods);
+            }
           }
           else {
-            this._log('signature rejected');
-            return ctx.reject();
+            this._log('no signature present');
+            return ctx.accept();
+          }
+        } else if(ctx.method === 'password') {
+          remainingMethods = [];
+          pubKey = this._findPassword(ctx.username, ctx.password);
+          if (!pubKey) {
+            this._log('password not found');
+            return ctx.reject(remainingMethods);
           }
-        }
-        else {
-          this._log('no signature present');
           return ctx.accept();
+        } else {
+          this._log('unsupported method ' + ctx.method);
+          return ctx.reject(remainingMethods);
         }
       })
       .on('ready', () => {
@@ -679,6 +718,17 @@ class SFTPS3Server extends EventEmitter {
     }
   }
 
+    _findPassword(username, password) {
+    for (var idx = 0; idx < this.passwordLogins.length; idx++) {
+      if (this.passwordLogins[idx]['username'] == username) {
+        var passwd = this.passwordLogins[idx];
+        if (passwd.password === password) {
+          return passwd;
+        }
+      }
+    }
+  }
+
   _mapKey(path, filename) {
     var p = filename;
     p = p.replace('\\\\', '/');