Files
libmicrohttpd/doc/examples/basicauthentication.c
T
2008-08-12 19:49:42 +00:00

153 lines
3.8 KiB
C

#include <microhttpd.h>
#include <string.h>
#include <stdio.h>
#include <stdlib.h>
#include <time.h>
#define PORT 8888
#define REALM "\"Maintenance\""
#define USER "a legitimate user"
#define PASSWORD "and his password"
char* StringToBase64(const char *message);
int AskForAuthentication(struct MHD_Connection *connection, const char *realm)
{
int ret;
struct MHD_Response *response;
char *headervalue;
const char *strbase = "Basic realm=";
response = MHD_create_response_from_data(0, NULL, MHD_NO, MHD_NO);
if (!response) return MHD_NO;
headervalue = malloc( strlen(strbase) + strlen(realm) + 1);
if (!headervalue) return MHD_NO;
strcpy(headervalue, strbase);
strcat(headervalue, realm);
ret = MHD_add_response_header(response, "WWW-Authenticate", headervalue);
free(headervalue);
if (!ret) {MHD_destroy_response (response); return MHD_NO;}
ret = MHD_queue_response (connection, MHD_HTTP_UNAUTHORIZED, response);
MHD_destroy_response (response);
return ret;
}
int IsAuthenticated(struct MHD_Connection *connection, const char *username,
const char *password)
{
const char *headervalue;
char *expected_b64, *expected;
const char *strbase = "Basic ";
int authenticated;
headervalue = MHD_lookup_connection_value (connection, MHD_HEADER_KIND, "Authorization");
if(headervalue == NULL) return 0;
if (strncmp(headervalue, strbase, strlen(strbase))!=0) return 0;
expected = malloc(strlen(username) + 1 + strlen(password) + 1);
if(expected == NULL) return 0;
strcpy(expected, username);
strcat(expected, ":");
strcat(expected, password);
expected_b64 = StringToBase64(expected);
if(expected_b64 == NULL) return 0;
strcpy(expected, strbase);
authenticated = (strcmp(headervalue+strlen(strbase), expected_b64) == 0);
free(expected_b64);
return authenticated;
}
int SecretPage(struct MHD_Connection *connection)
{
int ret;
struct MHD_Response *response;
const char *page = "<html><body>A secret.</body></html>";
response = MHD_create_response_from_data(strlen(page), (void*)page, MHD_NO, MHD_NO);
if (!response) return MHD_NO;
ret = MHD_queue_response (connection, MHD_HTTP_OK, response);
MHD_destroy_response (response);
return ret;
}
int AnswerToConnection(void *cls, struct MHD_Connection *connection,
const char *url, const char *method, const char *version,
const char *upload_data, unsigned int *upload_data_size, void **con_cls)
{
if (0 != strcmp(method, "GET")) return MHD_NO;
if(*con_cls==NULL) {*con_cls=connection; return MHD_YES;}
if (!IsAuthenticated(connection, USER, PASSWORD))
return AskForAuthentication(connection, REALM);
return SecretPage(connection);
}
int main ()
{
struct MHD_Daemon *daemon;
daemon = MHD_start_daemon(MHD_USE_SELECT_INTERNALLY, PORT, NULL, NULL,
&AnswerToConnection, NULL, MHD_OPTION_END);
if (daemon == NULL) return 1;
getchar();
MHD_stop_daemon(daemon);
return 0;
}
char* StringToBase64(const char *message)
{
const char *lookup = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
unsigned long l;
int i;
char *tmp;
size_t length = strlen(message);
tmp = malloc(length*2);
if (tmp==NULL) return tmp;
tmp[0]=0;
for(i=0; i<length; i+=3)
{
l = ( ((unsigned long)message[i])<<16 ) |
(((i+1) < length) ? (((unsigned long)message[i+1])<<8 ) : 0 ) |
(((i+2) < length) ? ( (unsigned long)message[i+2] ) : 0 );
strncat(tmp, &lookup[(l>>18) & 0x3F], 1);
strncat(tmp, &lookup[(l>>12) & 0x3F], 1);
if (i+1 < length) strncat(tmp, &lookup[(l>> 6) & 0x3F], 1);
if (i+2 < length) strncat(tmp, &lookup[(l ) & 0x3F], 1);
}
if (length%3) strncat(tmp, "===", 3-length%3) ;
return tmp;
}