#include "pch.h"
#include "LsaSecurity.h"

#pragma comment(lib,"Secur32")

using namespace WinSys;

void LsaStringToWstring(LSA_UNICODE_STRING& lsa, std::wstring& str) {
	str.assign(lsa.Buffer, lsa.Length / sizeof(WCHAR));
}

std::vector<LogonSessionData> LsaSecurity::EnumLogonSessions() {
	std::vector<LogonSessionData> sessions;

	LUID* luid;
	ULONG count;
	if (!NT_SUCCESS(::LsaEnumerateLogonSessions(&count, &luid)))
		return sessions;

	sessions.reserve(count);
	for (ULONG i = 0; i < count; i++) {
		SECURITY_LOGON_SESSION_DATA* data;
		if (NT_SUCCESS(::LsaGetLogonSessionData(luid + i, &data))) {
			LogonSessionData sd;
			sd.Index = i + 1;
			sd.LogonId = data->LogonId;
			LsaStringToWstring(data->AuthenticationPackage, sd.AuthenticationPackage);
			LsaStringToWstring(data->DnsDomainName, sd.DnsDomainName);
			LsaStringToWstring(data->HomeDirectory, sd.HomeDirectory);
			LsaStringToWstring(data->HomeDirectoryDrive, sd.HomeDirectoryDrive);
			LsaStringToWstring(data->LogonDomain, sd.LogonDomain);
			LsaStringToWstring(data->LogonScript, sd.LogonScript);
			LsaStringToWstring(data->LogonServer, sd.LogonServer);
			LsaStringToWstring(data->UserName, sd.UserName);
			LsaStringToWstring(data->Upn, sd.Upn);
			LsaStringToWstring(data->ProfilePath, sd.ProfilePath);

			sd.LogoffTime = data->LogoffTime;
			sd.LogonTime = data->LogonTime;
			sd.LastFailedLogon = data->LastLogonInfo.LastFailedLogon;
			sd.LastSuccessfulLogon = data->LastLogonInfo.LastSuccessfulLogon;
			sd.FailedAttemptCountSinceLastSuccessfulLogon = data->LastLogonInfo.FailedAttemptCountSinceLastSuccessfulLogon;
			sd.KickOffTime = data->KickOffTime;
			sd.UserFlags = data->UserFlags;
			sd.LogonType = (SecurityLogonType)data->LogonType;
			if (data->Sid)
				::CopySid(_countof(sd.Sid), (PSID)sd.Sid, data->Sid);
			else
				::memset(sd.Sid, 0, sizeof(sd.Sid));

			sd.Session = data->Session;
			sd.PasswordCanChange = data->PasswordCanChange;
			sd.PasswordLastSet = data->PasswordLastSet;
			sd.PasswordMustChange = data->PasswordMustChange;

			sessions.emplace_back(std::move(sd));

			::LsaFreeReturnBuffer(data);
		}
	}

	::LsaFreeReturnBuffer(luid);
	return sessions;
}

std::wstring LsaSecurity::GetUserNameByLogonSession(PLUID sessionId) {
	SECURITY_LOGON_SESSION_DATA* data;
	if (0 == ::LsaGetLogonSessionData(sessionId, &data)) {
		std::wstring username(data->UserName.Buffer, data->UserName.Length / sizeof(WCHAR));
		LsaFreeReturnBuffer(data);
		return username;
	}
	return L"";
}

LSA_HANDLE OpenLsaHandle(DWORD lsaAccess) {
	LSA_HANDLE hPolicy = nullptr;
	LSA_OBJECT_ATTRIBUTES oa = { sizeof(oa) };
	auto status = ::LsaOpenPolicy(nullptr, &oa, lsaAccess, &hPolicy);
	::SetLastError(::RtlNtStatusToDosError(status));
	return hPolicy;
}