Skip to content

K
koko
Commit 08f3f0b2 authored by Eric's avatar Eric
Browse files
Options

[Update] update user auth

parent b4ed7c7a
Show whitespace changes
Inline Side-by-side
Showing with 283 additions and 239 deletions
pkg/auth/server.go
View file @ 08f3f0b2
......@@ -6,10 +6,10 @@ import (
"github.com/gliderlabs/ssh"
gossh "golang.org/x/crypto/ssh"
"github.com/jumpserver/koko/pkg/cctx"
"github.com/jumpserver/koko/pkg/common"
"github.com/jumpserver/koko/pkg/config"
"github.com/jumpserver/koko/pkg/logger"
"github.com/jumpserver/koko/pkg/model"
"github.com/jumpserver/koko/pkg/service"
)
......@@ -31,28 +31,26 @@ func checkAuth(ctx ssh.Context, password, publicKey string) (res ssh.AuthResult)
authMethod = "password"
}
remoteAddr, _, _ := net.SplitHostPort(ctx.RemoteAddr().String())
userClient := service.NewSessionClient(service.Username(username),
service.Password(password), service.PublicKey(publicKey),
service.RemoteAddr(remoteAddr), service.LoginType("T"))
user, authStatus := userClient.Authenticate(ctx)
resp, err := service.Authenticate(username, password, publicKey, remoteAddr, "T")
if err != nil {
action = actionFailed
logger.Infof("%s %s for %s from %s", action, authMethod, username, remoteAddr)
return
}
if resp != nil {
switch resp.User.OTPLevel {
case 0:
res = ssh.AuthSuccessful
case 1, 2:
switch authStatus {
case service.AuthMFARequired:
ctx.SetValue(model.ContextKeyClient, &userClient)
action = actionPartialAccepted
res = ssh.AuthPartiallySuccessful
case service.AuthSuccess:
res = ssh.AuthSuccessful
ctx.SetValue(model.ContextKeyUser, &user)
default:
}
ctx.SetValue(cctx.ContextKeyUser, resp.User)
ctx.SetValue(cctx.ContextKeySeed, resp.Seed)
ctx.SetValue(cctx.ContextKeyToken, resp.Token)
action = actionFailed
}
logger.Infof("%s %s for %s from %s", action, authMethod, username, remoteAddr)
return res
return
}
func CheckUserPassword(ctx ssh.Context, password string) ssh.AuthResult {
......@@ -90,19 +88,19 @@ func CheckMFA(ctx ssh.Context, challenger gossh.KeyboardInteractiveChallenge) (r
return
}
mfaCode := answers[0]
seed, ok := ctx.Value(cctx.ContextKeySeed).(string)
client, ok := ctx.Value(model.ContextKeyClient).(*service.SessionClient)
if !ok {
logger.Error("Mfa Auth failed, may be user password or publickey auth failed")
logger.Errorf("User %s Mfa Auth failed: not found session client.", username, )
return
}
resp, err := service.CheckUserOTP(seed, mfaCode, remoteAddr, "T")
if err != nil {
logger.Error("Mfa Auth failed: ", err)
return
}
if resp.Token != "" {
user, authStatus := client.CheckUserOTP(ctx, mfaCode)
switch authStatus {
case service.AuthSuccess:
res = ssh.AuthSuccessful
return
ctx.SetValue(model.ContextKeyUser, &user)
logger.Infof("User %s Mfa Auth success", username)
default:
logger.Errorf("User %s Mfa Auth failed", username)
}
return
}
......
pkg/cctx/context.go deleted 100644 → 0
View file @ b4ed7c7a
package cctx
import (
"context"
"github.com/gliderlabs/ssh"
"github.com/jumpserver/koko/pkg/model"
)
type contextKey struct {
name string
}
var (
ContextKeyUser = &contextKey{"user"}
ContextKeyAsset = &contextKey{"asset"}
ContextKeySystemUser = &contextKey{"systemUser"}
ContextKeySSHSession = &contextKey{"sshSession"}
ContextKeyLocalAddr = &contextKey{"localAddr"}
ContextKeyRemoteAddr = &contextKey{"RemoteAddr"}
ContextKeySSHCtx = &contextKey{"sshCtx"}
ContextKeySeed = &contextKey{"seed"}
ContextKeyToken = &contextKey{"token"}
)
type Context interface {
context.Context
User() *model.User
Asset() *model.Asset
SystemUser() *model.SystemUser
SSHSession() *ssh.Session
SSHCtx() *ssh.Context
SetValue(key, value interface{})
}
// Context coco内部使用的Context
type CocoContext struct {
context.Context
}
// user 返回当前连接的用户model
func (ctx *CocoContext) User() *model.User {
return ctx.Value(ContextKeyUser).(*model.User)
}
func (ctx *CocoContext) Asset() *model.Asset {
return ctx.Value(ContextKeyAsset).(*model.Asset)
}
func (ctx *CocoContext) SystemUser() *model.SystemUser {
return ctx.Value(ContextKeySystemUser).(*model.SystemUser)
}
func (ctx *CocoContext) SSHSession() *ssh.Session {
return ctx.Value(ContextKeySSHSession).(*ssh.Session)
}
func (ctx *CocoContext) SSHCtx() *ssh.Context {
return ctx.Value(ContextKeySSHCtx).(*ssh.Context)
}
func (ctx *CocoContext) SetValue(key, value interface{}) {
ctx.Context = context.WithValue(ctx.Context, key, value)
}
func applySessionMetadata(ctx *CocoContext, sess ssh.Session) {
ctx.SetValue(ContextKeySSHSession, &sess)
ctx.SetValue(ContextKeySSHCtx, sess.Context())
ctx.SetValue(ContextKeyLocalAddr, sess.LocalAddr())
}
func NewContext(sess ssh.Session) (*CocoContext, context.CancelFunc) {
sshCtx, cancel := context.WithCancel(sess.Context())
ctx := &CocoContext{sshCtx}
applySessionMetadata(ctx, sess)
return ctx, cancel
}
pkg/common/client.go
View file @ 08f3f0b2
......@@ -9,6 +9,7 @@ import (
"io/ioutil"
"mime/multipart"
"net/http"
"net/http/cookiejar"
neturl "net/url"
"os"
"path/filepath"
......@@ -38,8 +39,10 @@ type UrlParser interface {
func NewClient(timeout time.Duration, baseHost string) Client {
headers := make(map[string]string)
jar, _ := cookiejar.New(nil)
client := http.Client{
Timeout: timeout * time.Second,
Jar: jar,
}
return Client{
BaseHost: baseHost,
......@@ -103,11 +106,10 @@ func (c *Client) parseUrl(url string, params []map[string]string) string {
func (c *Client) setAuthHeader(r *http.Request) {
if len(c.cookie) != 0 {
cookie := make([]string, 0)
for k, v := range c.cookie {
cookie = append(cookie, fmt.Sprintf("%s=%s", k, v))
c := http.Cookie{Name: k, Value: v,}
r.AddCookie(&c)
}
r.Header.Add("Cookie", strings.Join(cookie, ";"))
}
if len(c.basicAuth) == 2 {
r.SetBasicAuth(c.basicAuth[0], c.basicAuth[1])
......@@ -162,10 +164,9 @@ func (c *Client) Do(method, url string, data, res interface{}, params ...map[str
return
}
defer resp.Body.Close()
body, err := ioutil.ReadAll(resp.Body)
if resp.StatusCode >= 400 {
msg := fmt.Sprintf("%s %s failed, get code: %d, %s", req.Method, req.URL, resp.StatusCode, string(body))
if resp.StatusCode >= 500 {
msg := fmt.Sprintf("%s %s failed, get code: %d, %s", req.Method, req.URL, resp.StatusCode, body)
err = errors.New(msg)
return
}
......@@ -176,7 +177,7 @@ func (c *Client) Do(method, url string, data, res interface{}, params ...map[str
return
}
// Unmarshal response body to result struct
if res != nil && resp.StatusCode >= 200 && resp.StatusCode <= 300 {
if res != nil && strings.Contains(resp.Header.Get("Content-Type"), "application/json") {
err = json.Unmarshal(body, res)
if err != nil {
msg := fmt.Sprintf("%s %s failed, unmarshal '%s' response failed: %s", req.Method, req.URL, body[:12], err)
......
pkg/handler/session.go
View file @ 08f3f0b2
......@@ -10,7 +10,6 @@ import (
"github.com/gliderlabs/ssh"
"github.com/xlab/treeprint"
"github.com/jumpserver/koko/pkg/cctx"
"github.com/jumpserver/koko/pkg/common"
"github.com/jumpserver/koko/pkg/config"
"github.com/jumpserver/koko/pkg/logger"
......@@ -21,13 +20,16 @@ import (
)
func SessionHandler(sess ssh.Session) {
user, ok := sess.Context().Value(model.ContextKeyUser).(*model.User)
if !ok && user == nil {
logger.Errorf("SSH User %s not found, exit.", sess.User())
return
}
pty, _, ok := sess.Pty()
if ok {
ctx, cancel := cctx.NewContext(sess)
defer cancel()
handler := newInteractiveHandler(sess, ctx.User())
handler := newInteractiveHandler(sess, user)
logger.Infof("Request %s: User %s request pty %s", handler.sess.ID(), sess.User(), pty.Term)
handler.Dispatch(ctx)
handler.Dispatch(sess.Context())
} else {
utils.IgnoreErrWriteString(sess, "No PTY requested.\n")
return
......@@ -66,7 +68,7 @@ type interactiveHandler struct {
func (h *interactiveHandler) Initial() {
h.assetLoadPolicy = strings.ToLower(config.GetConf().AssetLoadPolicy)
h.displayBanner()
h.winWatchChan = make(chan bool)
h.winWatchChan = make(chan bool, 1)
h.loadDataDone = make(chan struct{})
go h.firstLoadData()
}
......@@ -130,7 +132,7 @@ func (h *interactiveHandler) resumeWatchWinSize() {
h.winWatchChan <- true
}
func (h *interactiveHandler) Dispatch(ctx cctx.Context) {
func (h *interactiveHandler) Dispatch(ctx context.Context) {
go h.watchWinSizeChange()
defer logger.Infof("Request %s: User %s stop interactive", h.sess.ID(), h.user.Name)
for {
......
pkg/handler/sftp.go
View file @ 08f3f0b2
......@@ -12,7 +12,6 @@ import (
"github.com/pkg/sftp"
uuid "github.com/satori/go.uuid"
"github.com/jumpserver/koko/pkg/cctx"
"github.com/jumpserver/koko/pkg/logger"
"github.com/jumpserver/koko/pkg/model"
"github.com/jumpserver/koko/pkg/service"
......@@ -20,10 +19,13 @@ import (
)
func SftpHandler(sess ssh.Session) {
ctx, cancel := cctx.NewContext(sess)
defer cancel()
currentUser, ok := sess.Context().Value(model.ContextKeyUser).(*model.User)
if !ok {
logger.Errorf("SFTP User not found, exit.")
return
}
host, _, _ := net.SplitHostPort(sess.RemoteAddr().String())
userSftp := NewSFTPHandler(ctx.User(), host)
userSftp := NewSFTPHandler(currentUser, host)
handlers := sftp.Handlers{
FileGet: userSftp,
FilePut: userSftp,
......@@ -34,7 +36,7 @@ func SftpHandler(sess ssh.Session) {
logger.Infof("SFTP request %s: Handler start", reqID)
req := sftp.NewRequestServer(sess, handlers)
if err := req.Serve(); err == io.EOF {
logger.Debug("SFTP request %s: Exited session.", reqID)
logger.Debugf("SFTP request %s: Exited session.", reqID)
} else if err != nil {
logger.Errorf("SFTP request %s: Server completed with error %s", reqID, err)
}
......@@ -82,7 +84,7 @@ func (fs *sftpHandler) Filecmd(r *sftp.Request) (err error) {
case "Setstat":
return
case "Rename":
logger.Debug("%s=>%s", r.Filepath, r.Target)
logger.Debugf("%s=>%s", r.Filepath, r.Target)
return fs.Rename(r.Filepath, r.Target)
case "Rmdir":
err = fs.RemoveDirectory(r.Filepath)
......@@ -91,7 +93,7 @@ func (fs *sftpHandler) Filecmd(r *sftp.Request) (err error) {
case "Mkdir":
err = fs.MkdirAll(r.Filepath)
case "Symlink":
logger.Debug("%s=>%s", r.Filepath, r.Target)
logger.Debugf("%s=>%s", r.Filepath, r.Target)
err = fs.Symlink(r.Filepath, r.Target)
default:
return
......
pkg/httpd/elfhandler.go
View file @ 08f3f0b2
......@@ -11,7 +11,6 @@ import (
"github.com/LeeEirc/elfinder"
"github.com/gorilla/mux"
"github.com/jumpserver/koko/pkg/cctx"
"github.com/jumpserver/koko/pkg/common"
"github.com/jumpserver/koko/pkg/config"
"github.com/jumpserver/koko/pkg/logger"
......@@ -45,8 +44,8 @@ func AuthDecorator(handler http.HandlerFunc) http.HandlerFunc {
} else {
remoteIP = strings.Split(request.RemoteAddr, ":")[0]
}
ctx := context.WithValue(request.Context(), cctx.ContextKeyUser, user)
ctx = context.WithValue(ctx, cctx.ContextKeyRemoteAddr, remoteIP)
ctx := context.WithValue(request.Context(), model.ContextKeyUser, user)
ctx = context.WithValue(ctx, model.ContextKeyRemoteAddr, remoteIP)
handler(responseWriter, request.WithContext(ctx))
}
}
......@@ -66,8 +65,8 @@ func sftpFinder(wr http.ResponseWriter, req *http.Request) {
func sftpHostConnectorView(wr http.ResponseWriter, req *http.Request) {
vars := mux.Vars(req)
hostID := vars["host"]
user := req.Context().Value(cctx.ContextKeyUser).(*model.User)
remoteIP := req.Context().Value(cctx.ContextKeyRemoteAddr).(string)
user := req.Context().Value(model.ContextKeyUser).(*model.User)
remoteIP := req.Context().Value(model.ContextKeyRemoteAddr).(string)
switch req.Method {
case "GET":
if err := req.ParseForm(); err != nil {
......
pkg/model/const.go 0 → 100644
View file @ 08f3f0b2
package model
type contextKey int64
const (
ContextKeyUser contextKey = iota + 1
ContextKeyRemoteAddr
ContextKeyClient
)
pkg/model/users.go
View file @ 08f3f0b2
......@@ -18,12 +18,6 @@ package model
'date_expired': '2089-03-21 18:18:24 +0800'}
*/
type AuthResponse struct {
Token string `json:"token"`
Seed string `json:"seed"`
User *User `json:"user"`
}
type User struct {
ID string `json:"id"`
Name string `json:"name"`
......
pkg/service/accesskey.go
View file @ 08f3f0b2
......@@ -70,10 +70,10 @@ func (ak *AccessKey) SaveToFile() error {
}
}
f, err := os.Create(ak.Path)
defer f.Close()
if err != nil {
return err
}
defer f.Close()
_, err = f.WriteString(fmt.Sprintf("%s:%s", ak.ID, ak.Secret))
if err != nil {
logger.Error(err)
......
pkg/service/cache.go deleted 100644 → 0
View file @ b4ed7c7a
package service
import (
"sync"
"github.com/jumpserver/koko/pkg/model"
)
type assetsCacheContainer struct {
mapData map[string]model.AssetList
mapETag map[string]string
mu *sync.RWMutex
}
func (c *assetsCacheContainer) Get(key string) (model.AssetList, bool) {
c.mu.RLock()
defer c.mu.RUnlock()
value, ok := c.mapData[key]
return value, ok
}
func (c *assetsCacheContainer) GetETag(key string) (string, bool) {
c.mu.RLock()
defer c.mu.RUnlock()
value, ok := c.mapETag[key]
return value, ok
}
func (c *assetsCacheContainer) SetValue(key string, value model.AssetList) {
c.mu.Lock()
defer c.mu.Unlock()
c.mapData[key] = value
}
func (c *assetsCacheContainer) SetETag(key string, value string) {
c.mu.Lock()
defer c.mu.Unlock()
c.mapETag[key] = value
}
type nodesCacheContainer struct {
mapData map[string]model.NodeList
mapETag map[string]string
mu *sync.RWMutex
}
func (c *nodesCacheContainer) Get(key string) (model.NodeList, bool) {
c.mu.RLock()
defer c.mu.RUnlock()
value, ok := c.mapData[key]
return value, ok
}
func (c *nodesCacheContainer) GetETag(key string) (string, bool) {
c.mu.RLock()
defer c.mu.RUnlock()
value, ok := c.mapETag[key]
return value, ok
}
func (c *nodesCacheContainer) SetValue(key string, value model.NodeList) {
c.mu.Lock()
defer c.mu.Unlock()
c.mapData[key] = value
}
func (c *nodesCacheContainer) SetETag(key string, value string) {
c.mu.Lock()
defer c.mu.Unlock()
c.mapETag[key] = value
}
pkg/service/errorcode.go 0 → 100644
View file @ 08f3f0b2
package service
const (
ErrLoginConfirmWait = "login_confirm_wait"
ErrLoginConfirmRejected = "login_confirm_rejected"
ErrLoginConfirmRequired = "login_confirm_required"
ErrMFARequired = "mfa_required"
ErrPasswordFailed = "password_failed"
)
pkg/service/init.go
View file @ 08f3f0b2
......@@ -13,15 +13,12 @@ import (
"github.com/jumpserver/koko/pkg/logger"
)
var client = common.NewClient(30, "")
var authClient = common.NewClient(30, "")
func Initial(ctx context.Context) {
cf := config.GetConf()
keyPath := cf.AccessKeyFile
client.BaseHost = cf.CoreHost
authClient.BaseHost = cf.CoreHost
client.SetHeader("X-JMS-ORG", "ROOT")
authClient.SetHeader("X-JMS-ORG", "ROOT")
if !path.IsAbs(cf.AccessKeyFile) {
......
pkg/service/options.go 0 → 100644
View file @ 08f3f0b2
package service
type AuthStatus int64
const (
AuthSuccess AuthStatus = iota + 1
AuthFailed
AuthMFARequired
)
type SessionOption func(*SessionOptions)
func Username(username string) SessionOption {
return func(args *SessionOptions) {
args.Username = username
}
}
func Password(password string) SessionOption {
return func(args *SessionOptions) {
args.Password = password
}
}
func PublicKey(publicKey string) SessionOption {
return func(args *SessionOptions) {
args.PublicKey = publicKey
}
}
func RemoteAddr(remoteAddr string) SessionOption {
return func(args *SessionOptions) {
args.RemoteAddr = remoteAddr
}
}
func LoginType(loginType string) SessionOption {
return func(args *SessionOptions) {
args.LoginType = loginType
}
}
type SessionOptions struct {
Username string
Password string
PublicKey string
RemoteAddr string
LoginType string
}
pkg/service/terminal.go
View file @ 08f3f0b2
......@@ -8,9 +8,7 @@ import (
)
func RegisterTerminal(name, token, comment string) (res model.Terminal) {
if client.Headers == nil {
client.Headers = make(map[string]string)
}
client := newClient()
client.Headers["Authorization"] = fmt.Sprintf("BootstrapToken %s", token)
data := map[string]string{"name": name, "comment": comment}
_, err := client.Post(TerminalRegisterURL, data, &res)
......
pkg/service/urls.go
View file @ 08f3f0b2
......@@ -38,3 +38,9 @@ const (
const (
UserAssetSystemUsersURL = "/api/v1/perms/users/%s/assets/%s/system-users/" // 获取用户授权资产的系统用户列表
)
// 1.5.5
const (
UserTokenAuthURL = "/api/v1/authentication/tokens/" // 用户登录验证
UserConfirmAuthURL = "/api/v1/authentication/order/auth/"
)
pkg/service/users.go
View file @ 08f3f0b2
package service
import (
"context"
"fmt"
"time"
"github.com/pkg/errors"
"github.com/jumpserver/koko/pkg/common"
"github.com/jumpserver/koko/pkg/logger"
"github.com/jumpserver/koko/pkg/model"
)
type AuthResp struct {
Token string `json:"token"`
Seed string `json:"seed"`
User *model.User `json:"user"`
type AuthResponse struct {
Err string `json:"error,omitempty"`
Msg string `json:"msg,omitempty"`
Data ResponseData `json:"data,omitempty"`
Username string `json:"username,omitempty"`
Token string `json:"token,omitempty"`
Keyword string `json:"keyword,omitempty"`
DateExpired string `json:"date_expired,omitempty"`
}
type ResponseData struct {
Choices []string `json:"choices,omitempty"`
Url string `json:"url,omitempty"`
}
type AuthOptions struct {
Name string
Url string
}
func NewSessionClient(setters ...SessionOption) SessionClient {
option := &SessionOptions{}
for _, setter := range setters {
setter(option)
}
conn := newClient()
return SessionClient{
option: option,
client: &conn,
authOptions: make(map[string]AuthOptions),
}
}
type SessionClient struct {
option *SessionOptions
client *common.Client
authOptions map[string]AuthOptions
}
func (u *SessionClient) Authenticate(ctx context.Context) (user model.User, authStatus AuthStatus) {
authStatus = AuthFailed
data := map[string]string{
"username": u.option.Username,
"password": u.option.Password,
"public_key": u.option.PublicKey,
"remote_addr": u.option.RemoteAddr,
"login_type": u.option.LoginType,
}
var resp AuthResponse
_, err := u.client.Post(UserTokenAuthURL, data, &resp)
if err != nil {
logger.Errorf("User %s Authenticate err: %s", u.option.Username, err)
return
}
fmt.Printf("%v\n", resp)
if resp.Err != "" {
switch resp.Err {
case ErrLoginConfirmRequired:
if !u.checkConfirm(ctx) {
logger.Errorf("User %s login confirm required err", u.option.Username)
return
}
logger.Infof("User %s login confirm required success", u.option.Username)
authStatus = AuthSuccess
case ErrLoginConfirmWait:
if !u.checkConfirm(ctx) {
logger.Errorf("User %s login confirm Wait check err", u.option.Username)
return
}
logger.Infof("User %s login confirm wait check success", u.option.Username)
authStatus = AuthSuccess
case ErrMFARequired:
for _, item := range resp.Data.Choices {
u.authOptions[item] = AuthOptions{
Name: item,
Url: resp.Data.Url,
}
}
logger.Infof("User %s login need MFA", u.option.Username)
authStatus = AuthMFARequired
}
return
}
if resp.Token != "" {
return user, AuthSuccess
}
return
}
func Authenticate(username, password, publicKey, remoteAddr, loginType string) (resp *AuthResp, err error) {
func (u *SessionClient) CheckUserOTP(ctx context.Context, code string) (user model.User, authStatus AuthStatus) {
var err error
authStatus = AuthFailed
data := map[string]string{
"username": username,
"password": password,
"public_key": publicKey,
"remote_addr": remoteAddr,
"login_type": loginType,
"code": code,
}
for name, authData := range u.authOptions {
var resp AuthResponse
switch name {
case "opt":
data["type"] = name
}
_, err = u.client.Post(authData.Url, data, &resp)
if err != nil {
return
}
if resp.Err != "" {
return
}
if resp.Msg == "ok" {
return u.Authenticate(ctx)
}
}
return
}
func (u *SessionClient) checkConfirm(ctx context.Context) bool {
doneChan := make(chan bool, 1)
go func() {
var err error
for {
select {
case <-ctx.Done():
doneChan <- false
case <-time.After(5 * time.Second):
var resp AuthResponse
_, err = u.client.Get(UserConfirmAuthURL, &resp)
if err != nil {
logger.Errorf("User %s check confirm err: %s", u.option.Username, err)
doneChan <- false
return
}
_, err = client.Post(UserAuthURL, data, &resp)
if resp.Err != "" {
switch resp.Err {
case ErrLoginConfirmWait:
logger.Infof("User %s wait confirm", u.option.Username)
continue
case ErrLoginConfirmRejected:
default:
}
logger.Infof("User %s confirm rejected %s", u.option.Username, resp.Err)
doneChan <- false
return
}
if resp.Msg == "ok" {
logger.Infof("User %s confirm accepted", u.option.Username)
doneChan <- true
return
}
}
}
}()
return <-doneChan
}
func GetUserDetail(userID string) (user *model.User) {
......@@ -56,20 +199,6 @@ func GetUserByUsername(username string) (user *model.User, err error) {
return
}
func CheckUserOTP(seed, code, remoteAddr, loginType string) (resp *AuthResp, err error) {
data := map[string]string{
"seed": seed,
"otp_code": code,
"remote_addr": remoteAddr,
"login_type": loginType,
}
_, err = client.Post(UserAuthOTPURL, data, &resp)
if err != nil {
return
}
return
}
func CheckUserCookie(sessionID, csrfToken string) (user *model.User, err error) {
cli := newClient()
cli.SetCookie("csrftoken", csrfToken)
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment