Maxim Integrated / Mbed 2 deprecated DeepCover Embedded Security in IoT

MAXREFDES143#: DeepCover Embedded Security in IoT Authenticated Sensing & Notification

Dependencies:   MaximInterface mbed

The MAXREFDES143# is an Internet of Things (IoT) embedded security reference design, built to protect an industrial sensing node by means of authentication and notification to a web server. The hardware includes a peripheral module representing a protected sensor node monitoring operating temperature and remaining life of a filter (simulated through ambient light sensing) and an mbed shield representing a controller node responsible for monitoring one or more sensor nodes. The design is hierarchical with each controller node communicating data from connected sensor nodes to a web server that maintains a centralized log and dispatches notifications as necessary. The mbed shield contains a Wi-Fi module, a DS2465 coprocessor with 1-Wire® master function, an LCD, LEDs, and pushbuttons. The protected sensor node contains a DS28E15 authenticator, a DS7505 temperature sensor, and a MAX44009 light sensor. The mbed shield communicates to a web server by the onboard Wi-Fi module and to the protected sensor node with I2C and 1-Wire. The MAXREFDES143# is equipped with a standard shield connector for immediate testing using an mbed board such as the MAX32600MBED#. The simplicity of this design enables rapid integration into any star-topology IoT network requiring the heightened security with low overhead provided by the SHA-256 symmetric-key algorithm.

More information about the MAXREFDES143# is available on the Maxim Integrated website.

WebServerInterface.cpp@4:71d578d3af22, 2016-04-20 (annotated)

Committer:
IanBenzMaxim
Date:
Wed Apr 20 09:49:25 2016 -0500
Revision:
4:71d578d3af22
Parent:
3:ac723be395d9
Child:
6:b6bafd0a7013
Minor cleanup

Who changed what in which revision?

UserRevisionLine numberNew contents of line
IanBenzMaxim 1:e1c7c1c636af 1 /*******************************************************************************
IanBenzMaxim 1:e1c7c1c636af 2 * Copyright (C) 2016 Maxim Integrated Products, Inc., All Rights Reserved.
IanBenzMaxim 1:e1c7c1c636af 3 *
IanBenzMaxim 1:e1c7c1c636af 4 * Permission is hereby granted, free of charge, to any person obtaining a
IanBenzMaxim 1:e1c7c1c636af 5 * copy of this software and associated documentation files (the "Software"),
IanBenzMaxim 1:e1c7c1c636af 6 * to deal in the Software without restriction, including without limitation
IanBenzMaxim 1:e1c7c1c636af 7 * the rights to use, copy, modify, merge, publish, distribute, sublicense,
IanBenzMaxim 1:e1c7c1c636af 8 * and/or sell copies of the Software, and to permit persons to whom the
IanBenzMaxim 1:e1c7c1c636af 9 * Software is furnished to do so, subject to the following conditions:
IanBenzMaxim 1:e1c7c1c636af 10 *
IanBenzMaxim 1:e1c7c1c636af 11 * The above copyright notice and this permission notice shall be included
IanBenzMaxim 1:e1c7c1c636af 12 * in all copies or substantial portions of the Software.
IanBenzMaxim 1:e1c7c1c636af 13 *
IanBenzMaxim 1:e1c7c1c636af 14 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
IanBenzMaxim 1:e1c7c1c636af 15 * OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
IanBenzMaxim 1:e1c7c1c636af 16 * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
IanBenzMaxim 1:e1c7c1c636af 17 * IN NO EVENT SHALL MAXIM INTEGRATED BE LIABLE FOR ANY CLAIM, DAMAGES
IanBenzMaxim 1:e1c7c1c636af 18 * OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
IanBenzMaxim 1:e1c7c1c636af 19 * ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
IanBenzMaxim 1:e1c7c1c636af 20 * OTHER DEALINGS IN THE SOFTWARE.
IanBenzMaxim 1:e1c7c1c636af 21 *
IanBenzMaxim 1:e1c7c1c636af 22 * Except as contained in this notice, the name of Maxim Integrated
IanBenzMaxim 1:e1c7c1c636af 23 * Products, Inc. shall not be used except as stated in the Maxim Integrated
IanBenzMaxim 1:e1c7c1c636af 24 * Products, Inc. Branding Policy.
IanBenzMaxim 1:e1c7c1c636af 25 *
IanBenzMaxim 1:e1c7c1c636af 26 * The mere transfer of this software does not imply any licenses
IanBenzMaxim 1:e1c7c1c636af 27 * of trade secrets, proprietary technology, copyrights, patents,
IanBenzMaxim 1:e1c7c1c636af 28 * trademarks, maskwork rights, or any other form of intellectual
IanBenzMaxim 1:e1c7c1c636af 29 * property whatsoever. Maxim Integrated Products, Inc. retains all
IanBenzMaxim 1:e1c7c1c636af 30 * ownership rights.
IanBenzMaxim 1:e1c7c1c636af 31 *******************************************************************************
IanBenzMaxim 1:e1c7c1c636af 32 */
IanBenzMaxim 1:e1c7c1c636af 33
IanBenzMaxim 1:e1c7c1c636af 34 #include <vector>
IanBenzMaxim 1:e1c7c1c636af 35
IanBenzMaxim 1:e1c7c1c636af 36 #include "WebServerInterface.hpp"
IanBenzMaxim 1:e1c7c1c636af 37 #include "ESP8266.hpp"
IanBenzMaxim 1:e1c7c1c636af 38 #include "OneWire_Masters/ISha256MacCoprocessor.hpp"
IanBenzMaxim 1:e1c7c1c636af 39 #include "common.hpp"
IanBenzMaxim 1:e1c7c1c636af 40 #include "mbed.h"
IanBenzMaxim 1:e1c7c1c636af 41
IanBenzMaxim 1:e1c7c1c636af 42 const char WebServerInterface::wifiSsid[] = "WifiSsid";
IanBenzMaxim 1:e1c7c1c636af 43 const char WebServerInterface::wifiPassword[] = "WifiPassword";
IanBenzMaxim 1:e1c7c1c636af 44 const char WebServerInterface::serverAddress[] = "website.com";
IanBenzMaxim 3:ac723be395d9 45 const unsigned int WebServerInterface::serverPort = 80;
IanBenzMaxim 1:e1c7c1c636af 46 const char WebServerInterface::serverPostPath[] = "/post.php";
IanBenzMaxim 1:e1c7c1c636af 47 const char WebServerInterface::serverChallengePath[] = "/challenge.php";
IanBenzMaxim 1:e1c7c1c636af 48
IanBenzMaxim 1:e1c7c1c636af 49 // HTTP formatting constants
IanBenzMaxim 1:e1c7c1c636af 50 static const char keyValSeparator = '=';
IanBenzMaxim 1:e1c7c1c636af 51 static const char fieldSeparator = '&';
IanBenzMaxim 1:e1c7c1c636af 52 static const std::string newline = "\r\n";
IanBenzMaxim 1:e1c7c1c636af 53 static const char sessionIdKey[] = "SessionId";
IanBenzMaxim 1:e1c7c1c636af 54
IanBenzMaxim 1:e1c7c1c636af 55 // Authentication MAC constants
IanBenzMaxim 1:e1c7c1c636af 56 static const std::size_t challengeLen = 32;
IanBenzMaxim 1:e1c7c1c636af 57 static const std::uint8_t defaultPaddingByte = 0x00;
IanBenzMaxim 1:e1c7c1c636af 58
IanBenzMaxim 1:e1c7c1c636af 59 /// Select the Transport Secret for the web server in the Controller.
IanBenzMaxim 1:e1c7c1c636af 60 /// @returns True on success.
IanBenzMaxim 1:e1c7c1c636af 61 static bool setHttpPostSecret(ISha256MacCoprocessor & MacCoproc)
IanBenzMaxim 1:e1c7c1c636af 62 {
IanBenzMaxim 4:71d578d3af22 63 ISha256MacCoprocessor::DevicePage::Buffer fillData;
IanBenzMaxim 4:71d578d3af22 64 std::memset(fillData, defaultPaddingByte, ISha256MacCoprocessor::DevicePage::length);
IanBenzMaxim 4:71d578d3af22 65 // static_assert(ISha256MacCoprocessor::DevicePage::length > ISha256MacCoprocessor::SlaveSecretData::length);
IanBenzMaxim 4:71d578d3af22 66 return (MacCoproc.computeSlaveSecret(fillData, fillData, reinterpret_cast<const ISha256MacCoprocessor::SlaveSecretData::Buffer &>(fillData)) == ISha256MacCoprocessor::Success);
IanBenzMaxim 1:e1c7c1c636af 67 }
IanBenzMaxim 1:e1c7c1c636af 68
IanBenzMaxim 1:e1c7c1c636af 69 WebServerInterface::WebServerInterface(ESP8266 & esp8266, mbed::Serial * pc)
IanBenzMaxim 1:e1c7c1c636af 70 : esp8266(esp8266), pc(pc)
IanBenzMaxim 1:e1c7c1c636af 71 {
IanBenzMaxim 1:e1c7c1c636af 72
IanBenzMaxim 1:e1c7c1c636af 73 }
IanBenzMaxim 1:e1c7c1c636af 74
IanBenzMaxim 1:e1c7c1c636af 75 bool WebServerInterface::initialize()
IanBenzMaxim 1:e1c7c1c636af 76 {
IanBenzMaxim 1:e1c7c1c636af 77 esp8266.setPowered(true);
IanBenzMaxim 1:e1c7c1c636af 78 esp8266.reset();
IanBenzMaxim 1:e1c7c1c636af 79 bool result = (esp8266.performSelfTest() == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 80 if (!result)
IanBenzMaxim 1:e1c7c1c636af 81 {
IanBenzMaxim 1:e1c7c1c636af 82 return false;
IanBenzMaxim 1:e1c7c1c636af 83 }
IanBenzMaxim 1:e1c7c1c636af 84 result = (esp8266.setCurrentWifiMode(ESP8266::softAP_station_mode) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 85 if (!result)
IanBenzMaxim 1:e1c7c1c636af 86 {
IanBenzMaxim 1:e1c7c1c636af 87 return false;
IanBenzMaxim 1:e1c7c1c636af 88 }
IanBenzMaxim 1:e1c7c1c636af 89 result = (esp8266.setMaxRFTXPower(10) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 90 if (!result)
IanBenzMaxim 1:e1c7c1c636af 91 {
IanBenzMaxim 1:e1c7c1c636af 92 return false;
IanBenzMaxim 1:e1c7c1c636af 93 }
IanBenzMaxim 1:e1c7c1c636af 94 result = (esp8266.joinCurrentAccessPoint(wifiSsid, wifiPassword) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 95 if (!result)
IanBenzMaxim 1:e1c7c1c636af 96 {
IanBenzMaxim 1:e1c7c1c636af 97 return false;
IanBenzMaxim 1:e1c7c1c636af 98 }
IanBenzMaxim 1:e1c7c1c636af 99 return true;
IanBenzMaxim 1:e1c7c1c636af 100 }
IanBenzMaxim 1:e1c7c1c636af 101
IanBenzMaxim 1:e1c7c1c636af 102 /// Format an HTTP GET request as a string for transmission.
IanBenzMaxim 1:e1c7c1c636af 103 /// @param host Web server address.
IanBenzMaxim 1:e1c7c1c636af 104 /// @param path Web server location to retrieve.
IanBenzMaxim 1:e1c7c1c636af 105 /// @param sessionId Session ID used to identify this controller.
IanBenzMaxim 1:e1c7c1c636af 106 /// @returns GET request string.
IanBenzMaxim 1:e1c7c1c636af 107 static std::string formatHttpGet(const std::string & host, const std::string & path, const std::string & sessionId)
IanBenzMaxim 1:e1c7c1c636af 108 {
IanBenzMaxim 1:e1c7c1c636af 109 std::ostringstream httpGetStream;
IanBenzMaxim 1:e1c7c1c636af 110 httpGetStream << "GET " << path;
IanBenzMaxim 1:e1c7c1c636af 111 if (sessionId.length() > 0)
IanBenzMaxim 1:e1c7c1c636af 112 httpGetStream << '?' << sessionIdKey << keyValSeparator << sessionId;
IanBenzMaxim 1:e1c7c1c636af 113 httpGetStream << " HTTP/1.1" << newline;
IanBenzMaxim 1:e1c7c1c636af 114 httpGetStream << "Host: " << host << newline;
IanBenzMaxim 1:e1c7c1c636af 115 httpGetStream << newline;
IanBenzMaxim 1:e1c7c1c636af 116 return httpGetStream.str();
IanBenzMaxim 1:e1c7c1c636af 117 }
IanBenzMaxim 1:e1c7c1c636af 118
IanBenzMaxim 1:e1c7c1c636af 119 /// Computes a MAC using the Transport Secret to sign HTTP POST requests.
IanBenzMaxim 1:e1c7c1c636af 120 /// @param macCoproc Coprocessor such as the DS2465 used to calculate the authentication MAC.
IanBenzMaxim 1:e1c7c1c636af 121 /// @param input Message array used for MAC calculation.
IanBenzMaxim 1:e1c7c1c636af 122 /// @param ilen Length of array input.
IanBenzMaxim 1:e1c7c1c636af 123 /// @param output Calculated MAC output.
IanBenzMaxim 1:e1c7c1c636af 124 static void calculateHttpPostMac(const ISha256MacCoprocessor & macCoproc, const std::uint8_t * input, std::size_t ilen, ISha256MacCoprocessor::Mac & output)
IanBenzMaxim 1:e1c7c1c636af 125 {
IanBenzMaxim 1:e1c7c1c636af 126 ISha256MacCoprocessor::DeviceScratchpad block;
IanBenzMaxim 1:e1c7c1c636af 127 std::size_t index = 0;
IanBenzMaxim 1:e1c7c1c636af 128 ISha256MacCoprocessor::AuthMacData padding;
IanBenzMaxim 1:e1c7c1c636af 129 std::memset(padding, defaultPaddingByte, padding.length);
IanBenzMaxim 1:e1c7c1c636af 130 std::memset(output, defaultPaddingByte, output.length); // Set initial hash value
IanBenzMaxim 1:e1c7c1c636af 131 while (index < ilen)
IanBenzMaxim 1:e1c7c1c636af 132 {
IanBenzMaxim 1:e1c7c1c636af 133 if ((index + block.length) <= ilen) // Full block
IanBenzMaxim 1:e1c7c1c636af 134 {
IanBenzMaxim 1:e1c7c1c636af 135 std::memcpy(block, &input[index], block.length);
IanBenzMaxim 1:e1c7c1c636af 136 index += block.length;
IanBenzMaxim 1:e1c7c1c636af 137 }
IanBenzMaxim 1:e1c7c1c636af 138 else // Partial block with padding
IanBenzMaxim 1:e1c7c1c636af 139 {
IanBenzMaxim 1:e1c7c1c636af 140 std::memcpy(block, &input[index], ilen - index);
IanBenzMaxim 1:e1c7c1c636af 141 std::memset(&block[ilen - index], defaultPaddingByte, block.length - (ilen - index));
IanBenzMaxim 1:e1c7c1c636af 142 index = ilen;
IanBenzMaxim 1:e1c7c1c636af 143 }
IanBenzMaxim 1:e1c7c1c636af 144 // Write data to coprocessor and hash block
IanBenzMaxim 1:e1c7c1c636af 145 macCoproc.computeAuthMac(output, block, padding, output);
IanBenzMaxim 1:e1c7c1c636af 146 }
IanBenzMaxim 1:e1c7c1c636af 147 }
IanBenzMaxim 1:e1c7c1c636af 148
IanBenzMaxim 1:e1c7c1c636af 149 /// Format an HTTP POST request as a string for transmission.
IanBenzMaxim 1:e1c7c1c636af 150 /// @param host Web server address.
IanBenzMaxim 1:e1c7c1c636af 151 /// @param path Web server location to receive POST.
IanBenzMaxim 1:e1c7c1c636af 152 /// @param sessionId Session ID used to identify this Controller.
IanBenzMaxim 1:e1c7c1c636af 153 /// @param macCoproc Coprocessor such as the DS2465 used to calculate the authentication MAC.
IanBenzMaxim 1:e1c7c1c636af 154 /// @param event Event message type.
IanBenzMaxim 1:e1c7c1c636af 155 /// @param initialPostBody Message body as determined by the event message type.
IanBenzMaxim 1:e1c7c1c636af 156 /// @param challenge Challenge previously received from web server for use in authentication MAC.
IanBenzMaxim 1:e1c7c1c636af 157 /// @returns POST request string.
IanBenzMaxim 1:e1c7c1c636af 158 static std::string formatHttpPost(const std::string & host, const std::string & path, const std::string & sessionId,
IanBenzMaxim 1:e1c7c1c636af 159 const ISha256MacCoprocessor & macCoproc, PostEvent event, const std::string & initialPostBody,
IanBenzMaxim 1:e1c7c1c636af 160 const std::uint8_t (&challenge)[challengeLen])
IanBenzMaxim 1:e1c7c1c636af 161 {
IanBenzMaxim 1:e1c7c1c636af 162 const std::size_t headerReserve = 115, bodyReserve = 200;
IanBenzMaxim 1:e1c7c1c636af 163
IanBenzMaxim 1:e1c7c1c636af 164 std::string httpPost;
IanBenzMaxim 1:e1c7c1c636af 165 httpPost.reserve(initialPostBody.length() + headerReserve + bodyReserve);
IanBenzMaxim 1:e1c7c1c636af 166
IanBenzMaxim 1:e1c7c1c636af 167 // Add session ID to post body
IanBenzMaxim 1:e1c7c1c636af 168 if (sessionId.length() > 0)
IanBenzMaxim 1:e1c7c1c636af 169 {
IanBenzMaxim 1:e1c7c1c636af 170 httpPost += sessionIdKey;
IanBenzMaxim 1:e1c7c1c636af 171 httpPost += keyValSeparator;
IanBenzMaxim 1:e1c7c1c636af 172 httpPost += sessionId;
IanBenzMaxim 1:e1c7c1c636af 173 }
IanBenzMaxim 1:e1c7c1c636af 174
IanBenzMaxim 1:e1c7c1c636af 175 // Add event to post body
IanBenzMaxim 1:e1c7c1c636af 176 std::string eventString;
IanBenzMaxim 1:e1c7c1c636af 177 switch (event)
IanBenzMaxim 1:e1c7c1c636af 178 {
IanBenzMaxim 1:e1c7c1c636af 179 case SensorDataEvent:
IanBenzMaxim 1:e1c7c1c636af 180 eventString = "SensorData";
IanBenzMaxim 1:e1c7c1c636af 181 break;
IanBenzMaxim 1:e1c7c1c636af 182
IanBenzMaxim 1:e1c7c1c636af 183 case InvalidSensorEvent:
IanBenzMaxim 1:e1c7c1c636af 184 eventString = "InvalidSensor";
IanBenzMaxim 1:e1c7c1c636af 185 break;
IanBenzMaxim 1:e1c7c1c636af 186 }
IanBenzMaxim 1:e1c7c1c636af 187 if (eventString.length() > 0)
IanBenzMaxim 1:e1c7c1c636af 188 {
IanBenzMaxim 1:e1c7c1c636af 189 if (httpPost.length() > 0)
IanBenzMaxim 1:e1c7c1c636af 190 httpPost += fieldSeparator;
IanBenzMaxim 1:e1c7c1c636af 191 httpPost += "Event";
IanBenzMaxim 1:e1c7c1c636af 192 httpPost += keyValSeparator;
IanBenzMaxim 1:e1c7c1c636af 193 httpPost += eventString;
IanBenzMaxim 1:e1c7c1c636af 194 }
IanBenzMaxim 1:e1c7c1c636af 195
IanBenzMaxim 1:e1c7c1c636af 196 // Add initial post body
IanBenzMaxim 1:e1c7c1c636af 197 if (initialPostBody.length() > 0)
IanBenzMaxim 1:e1c7c1c636af 198 {
IanBenzMaxim 1:e1c7c1c636af 199 if (httpPost.length() > 0)
IanBenzMaxim 1:e1c7c1c636af 200 httpPost += fieldSeparator;
IanBenzMaxim 1:e1c7c1c636af 201 httpPost += initialPostBody;
IanBenzMaxim 1:e1c7c1c636af 202 }
IanBenzMaxim 1:e1c7c1c636af 203
IanBenzMaxim 1:e1c7c1c636af 204 // Combine initial post body with initial secret and hash
IanBenzMaxim 1:e1c7c1c636af 205 std::vector<std::uint8_t> hashInput;
IanBenzMaxim 1:e1c7c1c636af 206 hashInput.reserve(challengeLen + httpPost.length());
IanBenzMaxim 1:e1c7c1c636af 207 hashInput.insert(hashInput.end(), challenge, challenge + challengeLen);
IanBenzMaxim 1:e1c7c1c636af 208 hashInput.insert(hashInput.end(), httpPost.begin(), httpPost.end());
IanBenzMaxim 1:e1c7c1c636af 209 ISha256MacCoprocessor::Mac mac;
IanBenzMaxim 1:e1c7c1c636af 210 calculateHttpPostMac(macCoproc, &hashInput[0], hashInput.size(), mac);
IanBenzMaxim 1:e1c7c1c636af 211
IanBenzMaxim 1:e1c7c1c636af 212 char contentLen[5];
IanBenzMaxim 1:e1c7c1c636af 213 std::snprintf(contentLen, sizeof(contentLen) / sizeof(char), "%u", (hashInput.size() - challengeLen) + (mac.length * charsPerByte) + 5 /* &MAC= */);
IanBenzMaxim 1:e1c7c1c636af 214
IanBenzMaxim 1:e1c7c1c636af 215 // Construct full post request
IanBenzMaxim 1:e1c7c1c636af 216 httpPost = "";
IanBenzMaxim 1:e1c7c1c636af 217 httpPost += "POST ";
IanBenzMaxim 1:e1c7c1c636af 218 httpPost += path;
IanBenzMaxim 1:e1c7c1c636af 219 httpPost += " HTTP/1.1";
IanBenzMaxim 1:e1c7c1c636af 220 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 221 httpPost += "Host: ";
IanBenzMaxim 1:e1c7c1c636af 222 httpPost += host;
IanBenzMaxim 1:e1c7c1c636af 223 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 224 httpPost += "Accept: */*";
IanBenzMaxim 1:e1c7c1c636af 225 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 226 httpPost += "Content-Length: ";
IanBenzMaxim 1:e1c7c1c636af 227 httpPost += contentLen;
IanBenzMaxim 1:e1c7c1c636af 228 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 229 httpPost += "Content-Type: application/x-www-form-urlencoded";
IanBenzMaxim 1:e1c7c1c636af 230 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 231 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 232 // Add post body
IanBenzMaxim 1:e1c7c1c636af 233 httpPost.append(reinterpret_cast<char *>(&hashInput[challengeLen]), hashInput.size() - challengeLen);
IanBenzMaxim 1:e1c7c1c636af 234 // Convert hash to hex string and add to post body
IanBenzMaxim 1:e1c7c1c636af 235 httpPost += fieldSeparator;
IanBenzMaxim 1:e1c7c1c636af 236 httpPost += "MAC";
IanBenzMaxim 1:e1c7c1c636af 237 httpPost += keyValSeparator;
IanBenzMaxim 1:e1c7c1c636af 238 byteArrayToHexString(mac, mac.length, httpPost);
IanBenzMaxim 1:e1c7c1c636af 239 httpPost += newline;
IanBenzMaxim 1:e1c7c1c636af 240
IanBenzMaxim 1:e1c7c1c636af 241 return httpPost;
IanBenzMaxim 1:e1c7c1c636af 242 }
IanBenzMaxim 1:e1c7c1c636af 243
IanBenzMaxim 1:e1c7c1c636af 244 bool WebServerInterface::authPostHttpEvent(ISha256MacCoprocessor & macCoproc, PostEvent event, const std::string & postData, bool setSecret)
IanBenzMaxim 1:e1c7c1c636af 245 {
IanBenzMaxim 1:e1c7c1c636af 246 const std::string challengeSearch(newline + newline);
IanBenzMaxim 1:e1c7c1c636af 247 bool result;
IanBenzMaxim 1:e1c7c1c636af 248 std::uint8_t challenge[challengeLen];
IanBenzMaxim 1:e1c7c1c636af 249 std::string response;
IanBenzMaxim 1:e1c7c1c636af 250
IanBenzMaxim 1:e1c7c1c636af 251 std::memset(challenge, defaultPaddingByte, challengeLen);
IanBenzMaxim 1:e1c7c1c636af 252 response.reserve(300);
IanBenzMaxim 1:e1c7c1c636af 253
IanBenzMaxim 1:e1c7c1c636af 254 if (setSecret)
IanBenzMaxim 1:e1c7c1c636af 255 {
IanBenzMaxim 1:e1c7c1c636af 256 result = setHttpPostSecret(macCoproc);
IanBenzMaxim 1:e1c7c1c636af 257 if (!result)
IanBenzMaxim 1:e1c7c1c636af 258 return result;
IanBenzMaxim 1:e1c7c1c636af 259 }
IanBenzMaxim 1:e1c7c1c636af 260
IanBenzMaxim 1:e1c7c1c636af 261 // Open connection
IanBenzMaxim 1:e1c7c1c636af 262 esp8266.clearRecvData(); // Clear received data buffer
IanBenzMaxim 1:e1c7c1c636af 263 result = (esp8266.openConnection(ESP8266::TCP, serverAddress, 80) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 264 if (result)
IanBenzMaxim 1:e1c7c1c636af 265 {
IanBenzMaxim 1:e1c7c1c636af 266 // Request challenge
IanBenzMaxim 1:e1c7c1c636af 267 result = (esp8266.sendData(formatHttpGet(serverAddress, serverChallengePath, sessionId)) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 268 if (result)
IanBenzMaxim 1:e1c7c1c636af 269 {
IanBenzMaxim 1:e1c7c1c636af 270 // Receive server response
IanBenzMaxim 1:e1c7c1c636af 271 for (int i = 0; i < 10; i++)
IanBenzMaxim 1:e1c7c1c636af 272 {
IanBenzMaxim 1:e1c7c1c636af 273 while (esp8266.recvIpDataReadable())
IanBenzMaxim 1:e1c7c1c636af 274 {
IanBenzMaxim 1:e1c7c1c636af 275 char read = esp8266.getcRecvIpData();
IanBenzMaxim 1:e1c7c1c636af 276 if (pc != NULL)
IanBenzMaxim 1:e1c7c1c636af 277 pc->putc(read);
IanBenzMaxim 1:e1c7c1c636af 278 if (response.length() < response.capacity())
IanBenzMaxim 1:e1c7c1c636af 279 {
IanBenzMaxim 1:e1c7c1c636af 280 response += read;
IanBenzMaxim 1:e1c7c1c636af 281 }
IanBenzMaxim 1:e1c7c1c636af 282 else
IanBenzMaxim 1:e1c7c1c636af 283 {
IanBenzMaxim 1:e1c7c1c636af 284 wait_ms(ESP8266::sendDataRecoveryTimeMs); // Wait for ESP8266 specified recovery time
IanBenzMaxim 1:e1c7c1c636af 285 goto close_get_connection;
IanBenzMaxim 1:e1c7c1c636af 286 }
IanBenzMaxim 1:e1c7c1c636af 287 }
IanBenzMaxim 1:e1c7c1c636af 288 wait_ms(100);
IanBenzMaxim 1:e1c7c1c636af 289 }
IanBenzMaxim 1:e1c7c1c636af 290 // Close connection
IanBenzMaxim 1:e1c7c1c636af 291 close_get_connection:
IanBenzMaxim 1:e1c7c1c636af 292 esp8266.closeConnection();
IanBenzMaxim 1:e1c7c1c636af 293
IanBenzMaxim 1:e1c7c1c636af 294 // Parse challenge from response
IanBenzMaxim 1:e1c7c1c636af 295 std::size_t challengePos = response.find(challengeSearch);
IanBenzMaxim 1:e1c7c1c636af 296 if ((challengePos != std::string::npos) && ((challengePos + challengeSearch.length() + (challengeLen * charsPerByte)) <= response.length()))
IanBenzMaxim 1:e1c7c1c636af 297 {
IanBenzMaxim 1:e1c7c1c636af 298 challengePos += challengeSearch.length();
IanBenzMaxim 1:e1c7c1c636af 299 for (std::size_t i = 0; i < challengeLen; i++)
IanBenzMaxim 1:e1c7c1c636af 300 {
IanBenzMaxim 1:e1c7c1c636af 301 std::sscanf(response.substr(challengePos + (i * charsPerByte), charsPerByte).c_str(), "%2hhx", &challenge[i]);
IanBenzMaxim 1:e1c7c1c636af 302 }
IanBenzMaxim 1:e1c7c1c636af 303 }
IanBenzMaxim 1:e1c7c1c636af 304
IanBenzMaxim 1:e1c7c1c636af 305 // Post sensor data
IanBenzMaxim 3:ac723be395d9 306 result = (esp8266.openConnection(ESP8266::TCP, serverAddress, serverPort) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 307 if (result)
IanBenzMaxim 1:e1c7c1c636af 308 {
IanBenzMaxim 1:e1c7c1c636af 309 result = (esp8266.sendData(formatHttpPost(serverAddress, serverPostPath, sessionId, macCoproc, event, postData, challenge)) == ESP8266::AT_OK);
IanBenzMaxim 1:e1c7c1c636af 310 wait_ms(ESP8266::sendDataRecoveryTimeMs); // Wait for ESP8266 specified recovery time
IanBenzMaxim 1:e1c7c1c636af 311 }
IanBenzMaxim 1:e1c7c1c636af 312 }
IanBenzMaxim 1:e1c7c1c636af 313
IanBenzMaxim 1:e1c7c1c636af 314 // Close connection
IanBenzMaxim 1:e1c7c1c636af 315 esp8266.closeConnection();
IanBenzMaxim 1:e1c7c1c636af 316 }
IanBenzMaxim 1:e1c7c1c636af 317
IanBenzMaxim 1:e1c7c1c636af 318 return result;
IanBenzMaxim 1:e1c7c1c636af 319 }
IanBenzMaxim 1:e1c7c1c636af 320
IanBenzMaxim 1:e1c7c1c636af 321 std::string WebServerInterface::formatSensorDataPostBody(const SensorData & sensorData)
IanBenzMaxim 1:e1c7c1c636af 322 {
IanBenzMaxim 1:e1c7c1c636af 323 // Create initial post body string from input data
IanBenzMaxim 1:e1c7c1c636af 324 std::ostringstream postBodyStream;
IanBenzMaxim 1:e1c7c1c636af 325 postBodyStream << "Temp" << keyValSeparator << static_cast<int>(sensorData.temp);
IanBenzMaxim 1:e1c7c1c636af 326 postBodyStream << fieldSeparator;
IanBenzMaxim 1:e1c7c1c636af 327 postBodyStream << "FilterLife" << keyValSeparator << static_cast<unsigned>(sensorData.filterLife);
IanBenzMaxim 1:e1c7c1c636af 328 postBodyStream << fieldSeparator;
IanBenzMaxim 1:e1c7c1c636af 329 postBodyStream << "TempAlarm" << keyValSeparator << (sensorData.tempAlarm() ? "true" : "false");
IanBenzMaxim 1:e1c7c1c636af 330 postBodyStream << fieldSeparator;
IanBenzMaxim 1:e1c7c1c636af 331 postBodyStream << "FilterLifeAlarm" << keyValSeparator << (sensorData.filterLifeAlarm() ? "true" : "false");
IanBenzMaxim 1:e1c7c1c636af 332 return postBodyStream.str();
IanBenzMaxim 1:e1c7c1c636af 333 }