mirrors/libmicrohttpd
2
0
Fork 0
mirror of https://git.gnunet.org/libmicrohttpd.git synced 2026-09-25 04:09:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

Updated documentation for the new Basic Authorization API

Browse Source
This commit is contained in:
Evgeny Grin (Karlson2k)
2022-06-13 12:23:01 +03:00
parent c2414ffc9a
commit 5249d3339c
2 changed files with 53 additions and 40 deletions
Download Patch File Download Diff File Expand all files Collapse all files
doc/chapters/basicauthentication.inc
+44 -34
View File
@@ -101,7 +101,7 @@ minor change, we can proceed to implement the actual authentication process.
Let us assume we had only files not intended to be handed out without the
correct username/password, so every "GET" request will be challenged.
@emph{RFC 2617} describes how the server shall ask for authentication by
@emph{RFC 7617} describes how the server shall ask for authentication by
adding a @emph{WWW-Authenticate} response header with the name of the
@emph{realm} protected. MHD can generate and queue such a failure response
for you using the @code{MHD_queue_basic_auth_fail_response} API. The only
@@ -112,50 +112,60 @@ the proper credentials were already supplied using the
Your code would then look like this:
@verbatim
static int
static enum MHD_Result
answer_to_connection (void *cls, struct MHD_Connection *connection,
const char *url, const char *method,
const char *version, const char *upload_data,
size_t *upload_data_size, void **req_cls)
{
char *user;
char *pass;
int fail;
struct MHD_BasicAuthInfo *auth_info;
enum MHD_Result ret;
struct MHD_Response *response;
if (0 != strcmp (method, MHD_HTTP_METHOD_GET))
if (0 != strcmp (method, "GET"))
return MHD_NO;
if (NULL == *req_cls)
{
*req_cls = connection;
return MHD_YES;
}
pass = NULL;
user = MHD_basic_auth_get_username_password (connection, &pass);
fail = ( (user == NULL) ||
(0 != strcmp (user, "root")) ||
(0 != strcmp (pass, "pa$$w0rd") ) );
if (user != NULL) free (user);
if (pass != NULL) free (pass);
if (fail)
{
const char *page = "<html><body>Go away.</body></html>";
response =
MHD_create_response_from_buffer (strlen (page), (void *) page,
MHD_RESPMEM_PERSISTENT);
ret = MHD_queue_basic_auth_fail_response (connection,
"my realm",
response);
}
{
*req_cls = connection;
return MHD_YES;
}
auth_info = MHD_basic_auth_get_username_password3 (connection);
if (NULL == auth_info)
{
static const char *page =
"<html><body>Authorization required</body></html>";
response = MHD_create_response_from_buffer_static (strlen (page), page);
ret = MHD_queue_basic_auth_fail_response3 (connection,
"admins",
MHD_YES,
response);
}
else if ((strlen ("root") != auth_info->username_len) ||
(0 != memcmp (auth_info->username, "root",
auth_info->username_len)) ||
/* The next check against NULL is optional,
* if 'password' is NULL then 'password_len' is always zero. */
(NULL == auth_info->password) ||
(strlen ("pa$$w0rd") != auth_info->password_len) ||
(0 != memcmp (auth_info->password, "pa$$w0rd",
auth_info->password_len)))
{
static const char *page =
"<html><body>Wrong username or password</body></html>";
response = MHD_create_response_from_buffer_static (strlen (page), page);
ret = MHD_queue_basic_auth_fail_response3 (connection,
"admins",
MHD_YES,
response);
}
else
{
const char *page = "<html><body>A secret.</body></html>";
response =
MHD_create_response_from_buffer (strlen (page), (void *) page,
MHD_RESPMEM_PERSISTENT);
ret = MHD_queue_response (connection, MHD_HTTP_OK, response);
}
{
static const char *page = "<html><body>A secret.</body></html>";
response = MHD_create_response_from_buffer_static (strlen (page), page);
ret = MHD_queue_response (connection, MHD_HTTP_OK, response);
}
if (NULL != auth_info)
MHD_free (auth_info);
MHD_destroy_response (response);
return ret;
}
doc/libmicrohttpd.texi
+9 -6
View File
@@ -3114,21 +3114,24 @@ client certificates is presented in the MHD tutorial.
Free the memory given at @code{ptr}. Used to free data structures allocated by MHD. Calls @code{free(ptr)}.
@end deftypefun
@deftypefun {char *} MHD_basic_auth_get_username_password (struct MHD_Connection *connection, char** password)
@deftypefun {char *} MHD_basic_auth_get_username_password3 (struct MHD_Connection *connection)
Get the username and password from the basic authorization header sent by the client.
Return @code{NULL} if no username could be found, a pointer to the username if found.
If returned value is not @code{NULL}, the value must be @code{MHD_free()}'ed.
@var{password} reference a buffer to store the password. It can be @code{NULL}.
Return @code{NULL} if no Basic Authorization header set by the client or if Base64
encoding is invalid; a pointer to the structure with username and password
if found values set by the client.
If returned value is not @code{NULL}, the value must be @code{MHD_free()}'ed.
@end deftypefun
@deftypefun {enum MHD_Result} MHD_queue_basic_auth_fail_response (struct MHD_Connection *connection, const char *realm, struct MHD_Response *response)
@deftypefun {enum MHD_Result} MHD_queue_basic_auth_fail_response3 (struct MHD_Connection *connection, const char *realm, int prefer_utf8, struct MHD_Response *response)
Queues a response to request basic authentication from the client.
Return @code{MHD_YES} if successful, otherwise @code{MHD_NO}.
@var{realm} must reference to a zero-terminated string representing the realm.
@var{prefer_utf8} if set to @code{MHD_YES} then parameter @code{charset} with value
@code{UTF-8} will be added to the response authentication header which indicates
that UTF-8 encoding is preferred for username and password.
@var{response} a response structure to specify what shall be presented to the
client with a 401 HTTP status.
@end deftypefun