2018-09-26 23:38:44 +03:00
|
|
|
// Copyright 2018 The Grin Developers
|
|
|
|
|
//
|
|
|
|
|
// Licensed under the Apache License, Version 2.0 (the "License");
|
|
|
|
|
// you may not use this file except in compliance with the License.
|
|
|
|
|
// You may obtain a copy of the License at
|
|
|
|
|
//
|
|
|
|
|
// http://www.apache.org/licenses/LICENSE-2.0
|
|
|
|
|
//
|
|
|
|
|
// Unless required by applicable law or agreed to in writing, software
|
|
|
|
|
// distributed under the License is distributed on an "AS IS" BASIS,
|
|
|
|
|
// WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
|
|
|
|
|
// See the License for the specific language governing permissions and
|
|
|
|
|
// limitations under the License.
|
|
|
|
|
|
|
|
|
|
use futures::future::ok;
|
|
|
|
|
use hyper::header::{HeaderValue, AUTHORIZATION, WWW_AUTHENTICATE};
|
|
|
|
|
use hyper::{Body, Request, Response, StatusCode};
|
2018-10-09 16:32:53 +03:00
|
|
|
use ring::constant_time::verify_slices_are_equal;
|
2018-09-26 23:38:44 +03:00
|
|
|
use router::{Handler, HandlerObj, ResponseFuture};
|
|
|
|
|
|
|
|
|
|
// Basic Authentication Middleware
|
|
|
|
|
pub struct BasicAuthMiddleware {
|
|
|
|
|
api_basic_auth: String,
|
|
|
|
|
basic_realm: String,
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
impl BasicAuthMiddleware {
|
|
|
|
|
pub fn new(api_basic_auth: String, basic_realm: String) -> BasicAuthMiddleware {
|
|
|
|
|
BasicAuthMiddleware {
|
|
|
|
|
api_basic_auth,
|
|
|
|
|
basic_realm,
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
impl Handler for BasicAuthMiddleware {
|
|
|
|
|
fn call(
|
|
|
|
|
&self,
|
|
|
|
|
req: Request<Body>,
|
|
|
|
|
mut handlers: Box<Iterator<Item = HandlerObj>>,
|
|
|
|
|
) -> ResponseFuture {
|
2018-10-09 16:32:53 +03:00
|
|
|
if req.headers().contains_key(AUTHORIZATION) && verify_slices_are_equal(
|
|
|
|
|
req.headers()[AUTHORIZATION].as_bytes(),
|
|
|
|
|
&self.api_basic_auth.as_bytes(),
|
|
|
|
|
).is_ok()
|
2018-09-29 10:28:25 +03:00
|
|
|
{
|
|
|
|
|
handlers.next().unwrap().call(req, handlers)
|
2018-09-26 23:38:44 +03:00
|
|
|
} else {
|
|
|
|
|
// Unauthorized 401
|
|
|
|
|
unauthorized_response(&self.basic_realm)
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
}
|
|
|
|
|
|
|
|
|
|
fn unauthorized_response(basic_realm: &str) -> ResponseFuture {
|
|
|
|
|
let response = Response::builder()
|
|
|
|
|
.status(StatusCode::UNAUTHORIZED)
|
|
|
|
|
.header(
|
|
|
|
|
WWW_AUTHENTICATE,
|
|
|
|
|
HeaderValue::from_str(basic_realm).unwrap(),
|
|
|
|
|
).body(Body::empty())
|
|
|
|
|
.unwrap();
|
|
|
|
|
Box::new(ok(response))
|
|
|
|
|
}
|
