summaryrefslogtreecommitdiff
path: root/vendor/github.com/gin-gonic/gin/auth.go
diff options
context:
space:
mode:
Diffstat (limited to 'vendor/github.com/gin-gonic/gin/auth.go')
-rw-r--r--vendor/github.com/gin-gonic/gin/auth.go116
1 files changed, 0 insertions, 116 deletions
diff --git a/vendor/github.com/gin-gonic/gin/auth.go b/vendor/github.com/gin-gonic/gin/auth.go
deleted file mode 100644
index 5d3222d56..000000000
--- a/vendor/github.com/gin-gonic/gin/auth.go
+++ /dev/null
@@ -1,116 +0,0 @@
-// Copyright 2014 Manu Martinez-Almeida. All rights reserved.
-// Use of this source code is governed by a MIT style
-// license that can be found in the LICENSE file.
-
-package gin
-
-import (
- "crypto/subtle"
- "encoding/base64"
- "net/http"
- "strconv"
-
- "github.com/gin-gonic/gin/internal/bytesconv"
-)
-
-// AuthUserKey is the cookie name for user credential in basic auth.
-const AuthUserKey = "user"
-
-// AuthProxyUserKey is the cookie name for proxy_user credential in basic auth for proxy.
-const AuthProxyUserKey = "proxy_user"
-
-// Accounts defines a key/value for user/pass list of authorized logins.
-type Accounts map[string]string
-
-type authPair struct {
- value string
- user string
-}
-
-type authPairs []authPair
-
-func (a authPairs) searchCredential(authValue string) (string, bool) {
- if authValue == "" {
- return "", false
- }
- for _, pair := range a {
- if subtle.ConstantTimeCompare(bytesconv.StringToBytes(pair.value), bytesconv.StringToBytes(authValue)) == 1 {
- return pair.user, true
- }
- }
- return "", false
-}
-
-// BasicAuthForRealm returns a Basic HTTP Authorization middleware. It takes as arguments a map[string]string where
-// the key is the user name and the value is the password, as well as the name of the Realm.
-// If the realm is empty, "Authorization Required" will be used by default.
-// (see http://tools.ietf.org/html/rfc2617#section-1.2)
-func BasicAuthForRealm(accounts Accounts, realm string) HandlerFunc {
- if realm == "" {
- realm = "Authorization Required"
- }
- realm = "Basic realm=" + strconv.Quote(realm)
- pairs := processAccounts(accounts)
- return func(c *Context) {
- // Search user in the slice of allowed credentials
- user, found := pairs.searchCredential(c.requestHeader("Authorization"))
- if !found {
- // Credentials doesn't match, we return 401 and abort handlers chain.
- c.Header("WWW-Authenticate", realm)
- c.AbortWithStatus(http.StatusUnauthorized)
- return
- }
-
- // The user credentials was found, set user's id to key AuthUserKey in this context, the user's id can be read later using
- // c.MustGet(gin.AuthUserKey).
- c.Set(AuthUserKey, user)
- }
-}
-
-// BasicAuth returns a Basic HTTP Authorization middleware. It takes as argument a map[string]string where
-// the key is the user name and the value is the password.
-func BasicAuth(accounts Accounts) HandlerFunc {
- return BasicAuthForRealm(accounts, "")
-}
-
-func processAccounts(accounts Accounts) authPairs {
- length := len(accounts)
- assert1(length > 0, "Empty list of authorized credentials")
- pairs := make(authPairs, 0, length)
- for user, password := range accounts {
- assert1(user != "", "User can not be empty")
- value := authorizationHeader(user, password)
- pairs = append(pairs, authPair{
- value: value,
- user: user,
- })
- }
- return pairs
-}
-
-func authorizationHeader(user, password string) string {
- base := user + ":" + password
- return "Basic " + base64.StdEncoding.EncodeToString(bytesconv.StringToBytes(base))
-}
-
-// BasicAuthForProxy returns a Basic HTTP Proxy-Authorization middleware.
-// If the realm is empty, "Proxy Authorization Required" will be used by default.
-func BasicAuthForProxy(accounts Accounts, realm string) HandlerFunc {
- if realm == "" {
- realm = "Proxy Authorization Required"
- }
- realm = "Basic realm=" + strconv.Quote(realm)
- pairs := processAccounts(accounts)
- return func(c *Context) {
- proxyUser, found := pairs.searchCredential(c.requestHeader("Proxy-Authorization"))
- if !found {
- // Credentials doesn't match, we return 407 and abort handlers chain.
- c.Header("Proxy-Authenticate", realm)
- c.AbortWithStatus(http.StatusProxyAuthRequired)
- return
- }
- // The proxy_user credentials was found, set proxy_user's id to key AuthProxyUserKey in this context, the proxy_user's id can be read later using
- // c.MustGet(gin.AuthProxyUserKey).
- c.Set(AuthProxyUserKey, proxyUser)
- }
-}