zap_auth.hpp

Go to the documentation of this file.

/*
  _____              _         _   _
 |__  /__ _ _ __    / \  _   _| |_| |__
   / // _` | '_ \  / _ \| | | | __| '_ \
  / /| (_| | |_) |/ ___ \ |_| | |_| | | |
 /____\__,_| .__//_/   \_\__,_|\__|_| |_|
           |_|
 
ZeroMQ Authentication Protocol (ZAP, RFC 27) handler
Copyright (C) 2026 Paolo Bosetti
*/
 
#pragma once
#ifdef _WIN32
#ifndef NOMINMAX
#define NOMINMAX
#endif
#ifndef WIN32_LEAN_AND_MEAN
#define WIN32_LEAN_AND_MEAN
#endif
#include <winsock2.h>
#endif
 
#include <atomic>
#include <memory>
#include <mutex>
#include <set>
#include <string>
#include <thread>
 
#include <zmq.hpp>
 
namespace Mads {
 
class ZapAuth {
public:
  explicit ZapAuth(zmq::context_t &context) : _context(context) {}
 
  ~ZapAuth() { stop(); }
 
  ZapAuth(const ZapAuth &) = delete;
  ZapAuth &operator=(const ZapAuth &) = delete;
  ZapAuth(ZapAuth &&) = delete;
  ZapAuth &operator=(ZapAuth &&) = delete;
 
  void start();
 
  void stop();
 
  void set_verbose(bool verbose) { _verbose.store(verbose); }
 
  void configure_domain(const std::string &domain);
 
  void allow(const std::string &address);
 
  void configure_curve(const std::string &z85_public_key);
 
  int granted() const { return _granted.load(); }
 
  int denied() const { return _denied.load(); }
 
  static constexpr const char *endpoint = "inproc://zeromq.zap.01";
 
private:
  void _serve();
 
  bool _authorise(const std::string &domain, const std::string &address,
                  const std::string &mechanism,
                  const std::string &credentials, std::string &reason) const;
 
  zmq::context_t &_context;
  std::unique_ptr<zmq::socket_t> _socket;
  std::thread _thread;
  std::atomic<bool> _stop{false};
  std::atomic<bool> _running{false};
  std::atomic<bool> _verbose{false};
  std::atomic<int> _granted{0};
  std::atomic<int> _denied{0};
  mutable std::mutex _config_mutex;
  std::string _domain = "*";
  std::set<std::string> _allowed_addresses;
  std::set<std::string> _allowed_curve_keys;
};
 
struct CurveKeypair {
  std::string public_key;
  std::string secret_key;
};
 
CurveKeypair generate_keypair();
 
std::string z85_encode(const std::string &data);
 
} // namespace Mads