annotate src/http/modules/ngx_http_auth_basic_module.c @ 58:b55cbf18157e NGINX_0_1_29

nginx 0.1.29 *) Feature: the ngx_http_ssi_module supports "include virtual" command. *) Feature: the ngx_http_ssi_module supports the condition command like 'if expr="$NAME"' and "else" and "endif" commands. Only one nested level is supported. *) Feature: the ngx_http_ssi_module supports the DATE_LOCAL and DATE_GMT variables and "config timefmt" command. *) Feature: the "ssi_ignore_recycled_buffers" directive. *) Bugfix: the "echo" command did not show the default value for the empty QUERY_STRING variable. *) Change: the ngx_http_proxy_module was rewritten. *) Feature: the "proxy_redirect", "proxy_pass_request_headers", "proxy_pass_request_body", and "proxy_method" directives. *) Feature: the "proxy_set_header" directive. The "proxy_x_var" was canceled and must be replaced with the proxy_set_header directive. *) Change: the "proxy_preserve_host" is canceled and must be replaced with the "proxy_set_header Host $host" and the "proxy_redirect off" directives, the "proxy_set_header Host $host:$proxy_port" directive and the appropriate proxy_redirect directives. *) Change: the "proxy_set_x_real_ip" is canceled and must be replaced with the "proxy_set_header X-Real-IP $remote_addr" directive. *) Change: the "proxy_add_x_forwarded_for" is canceled and must be replaced with the "proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for" directive. *) Change: the "proxy_set_x_url" is canceled and must be replaced with the "proxy_set_header X-URL http://$host:$server_port$request_uri" directive. *) Feature: the "fastcgi_param" directive. *) Change: the "fastcgi_root", "fastcgi_set_var" and "fastcgi_params" directive are canceled and must be replaced with the fastcgi_param directives. *) Feature: the "index" directive can use the variables. *) Feature: the "index" directive can be used at http and server levels. *) Change: the last index only in the "index" directive can be absolute. *) Feature: the "rewrite" directive can use the variables. *) Feature: the "internal" directive. *) Feature: the CONTENT_LENGTH, CONTENT_TYPE, REMOTE_PORT, SERVER_ADDR, SERVER_PORT, SERVER_PROTOCOL, DOCUMENT_ROOT, SERVER_NAME, REQUEST_METHOD, REQUEST_URI, and REMOTE_USER variables. *) Change: nginx now passes the invalid lines in a client request headers or a backend response header. *) Bugfix: if the backend did not transfer response for a long time and the "send_timeout" was less than "proxy_read_timeout", then nginx returned the 408 response. *) Bugfix: the segmentation fault was occurred if the backend sent an invalid line in response header; bug appeared in 0.1.26. *) Bugfix: the segmentation fault may occurred in FastCGI fault tolerance configuration. *) Bugfix: the "expires" directive did not remove the previous "Expires" and "Cache-Control" headers. *) Bugfix: nginx did not take into account trailing dot in "Host" header line. *) Bugfix: the ngx_http_auth_module did not work under Linux. *) Bugfix: the rewrite directive worked incorrectly, if the arguments were in a request. *) Bugfix: nginx could not be built on MacOS X.
author Igor Sysoev <http://sysoev.ru>
date Thu, 12 May 2005 00:00:00 +0400
parents 0d75d65c642f
children e916a291e9aa
Ignore whitespace changes - Everywhere: Within whitespace: At end of lines:
rev   line source
52
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
1
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
2 /*
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
3 * Copyright (C) Igor Sysoev
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
4 */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
5
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
6
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
7 #include <ngx_config.h>
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
8 #include <ngx_core.h>
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
9 #include <ngx_http.h>
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
10
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
11
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
12 #define NGX_HTTP_AUTH_BUF_SIZE 2048
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
13
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
14
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
15 typedef struct {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
16 ngx_str_t passwd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
17 } ngx_http_auth_basic_ctx_t;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
18
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
19
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
20 typedef struct {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
21 ngx_str_t realm;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
22 ngx_str_t user_file;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
23 } ngx_http_auth_basic_loc_conf_t;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
24
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
25
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
26 static ngx_int_t ngx_http_auth_basic_handler(ngx_http_request_t *r);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
27 static ngx_int_t ngx_http_auth_basic_crypt_handler(ngx_http_request_t *r,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
28 ngx_http_auth_basic_ctx_t *ctx, ngx_str_t *passwd, ngx_str_t *realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
29 static ngx_int_t ngx_http_auth_basic_set_realm(ngx_http_request_t *r,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
30 ngx_str_t *realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
31 static void ngx_http_auth_basic_close(ngx_file_t *file);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
32 static void *ngx_http_auth_basic_create_loc_conf(ngx_conf_t *cf);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
33 static char *ngx_http_auth_basic_merge_loc_conf(ngx_conf_t *cf,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
34 void *parent, void *child);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
35 static ngx_int_t ngx_http_auth_basic_init(ngx_cycle_t *cycle);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
36 static char *ngx_http_auth_basic(ngx_conf_t *cf, void *post, void *data);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
37
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
38
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
39 static ngx_conf_post_handler_pt ngx_http_auth_basic_p = ngx_http_auth_basic;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
40
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
41 static ngx_command_t ngx_http_auth_basic_commands[] = {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
42
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
43 { ngx_string("auth_basic"),
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
44 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
45 ngx_conf_set_str_slot,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
46 NGX_HTTP_LOC_CONF_OFFSET,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
47 offsetof(ngx_http_auth_basic_loc_conf_t, realm),
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
48 &ngx_http_auth_basic_p },
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
49
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
50 { ngx_string("auth_basic_user_file"),
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
51 NGX_HTTP_MAIN_CONF|NGX_HTTP_SRV_CONF|NGX_HTTP_LOC_CONF|NGX_CONF_TAKE1,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
52 ngx_conf_set_str_slot,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
53 NGX_HTTP_LOC_CONF_OFFSET,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
54 offsetof(ngx_http_auth_basic_loc_conf_t, user_file),
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
55 NULL },
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
56
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
57 ngx_null_command
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
58 };
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
59
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
60
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
61
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
62 ngx_http_module_t ngx_http_auth_basic_module_ctx = {
58
b55cbf18157e nginx 0.1.29
Igor Sysoev <http://sysoev.ru>
parents: 52
diff changeset
63 NULL, /* preconfiguration */
b55cbf18157e nginx 0.1.29
Igor Sysoev <http://sysoev.ru>
parents: 52
diff changeset
64 NULL, /* postconfiguration */
52
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
65
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
66 NULL, /* create main configuration */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
67 NULL, /* init main configuration */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
68
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
69 NULL, /* create server configuration */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
70 NULL, /* merge server configuration */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
71
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
72 ngx_http_auth_basic_create_loc_conf, /* create location configuration */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
73 ngx_http_auth_basic_merge_loc_conf /* merge location configuration */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
74 };
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
75
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
76
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
77 ngx_module_t ngx_http_auth_basic_module = {
58
b55cbf18157e nginx 0.1.29
Igor Sysoev <http://sysoev.ru>
parents: 52
diff changeset
78 NGX_MODULE_V1,
52
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
79 &ngx_http_auth_basic_module_ctx, /* module context */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
80 ngx_http_auth_basic_commands, /* module directives */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
81 NGX_HTTP_MODULE, /* module type */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
82 ngx_http_auth_basic_init, /* init module */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
83 NULL /* init process */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
84 };
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
85
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
86
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
87 static ngx_int_t
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
88 ngx_http_auth_basic_handler(ngx_http_request_t *r)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
89 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
90 off_t offset;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
91 ssize_t n;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
92 ngx_fd_t fd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
93 ngx_str_t auth, encoded, pwd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
94 ngx_uint_t i, login, len, left, passwd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
95 ngx_file_t file;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
96 ngx_http_auth_basic_ctx_t *ctx;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
97 ngx_http_auth_basic_loc_conf_t *alcf;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
98 u_char buf[NGX_HTTP_AUTH_BUF_SIZE];
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
99 enum {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
100 sw_login,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
101 sw_passwd,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
102 sw_skip
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
103 } state;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
104
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
105 alcf = ngx_http_get_module_loc_conf(r, ngx_http_auth_basic_module);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
106
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
107 if (alcf->realm.len == 0 || alcf->user_file.len == 0) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
108 return NGX_OK;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
109 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
110
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
111 ctx = ngx_http_get_module_ctx(r, ngx_http_auth_basic_module);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
112
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
113 if (ctx) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
114 return ngx_http_auth_basic_crypt_handler(r, ctx, &ctx->passwd,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
115 &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
116 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
117
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
118 if (r->headers_in.authorization == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
119 return ngx_http_auth_basic_set_realm(r, &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
120 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
121
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
122 encoded = r->headers_in.authorization->value;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
123
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
124 if (encoded.len < sizeof("Basic ") - 1
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
125 || ngx_strncasecmp(encoded.data, "Basic ", sizeof("Basic ") - 1) != 0)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
126 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
127 return ngx_http_auth_basic_set_realm(r, &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
128 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
129
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
130 encoded.len -= sizeof("Basic ") - 1;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
131 encoded.data += sizeof("Basic ") - 1;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
132
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
133 while (encoded.len && encoded.data[0] == ' ') {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
134 encoded.len--;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
135 encoded.data++;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
136 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
137
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
138 if (encoded.len == 0) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
139 return ngx_http_auth_basic_set_realm(r, &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
140 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
141
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
142 auth.len = ngx_base64_decoded_length(encoded.len);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
143 auth.data = ngx_palloc(r->pool, auth.len + 1);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
144 if (auth.data == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
145 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
146 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
147
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
148 if (ngx_decode_base64(&auth, &encoded) != NGX_OK) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
149 return ngx_http_auth_basic_set_realm(r, &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
150 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
151
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
152 auth.data[auth.len] = '\0';
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
153
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
154 for (len = 0; len < auth.len; len++) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
155 if (auth.data[len] == ':') {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
156 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
157 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
158 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
159
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
160 if (len == auth.len) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
161 return ngx_http_auth_basic_set_realm(r, &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
162 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
163
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
164 r->headers_in.user.len = len;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
165 r->headers_in.user.data = auth.data;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
166 r->headers_in.passwd.len = auth.len - len - 1;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
167 r->headers_in.passwd.data = &auth.data[len + 1];
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
168
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
169 fd = ngx_open_file(alcf->user_file.data, NGX_FILE_RDONLY, NGX_FILE_OPEN);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
170
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
171 if (fd == NGX_INVALID_FILE) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
172 ngx_log_error(NGX_LOG_ERR, r->connection->log, ngx_errno,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
173 ngx_open_file_n " \"%s\" failed", alcf->user_file.data);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
174 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
175 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
176
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
177 ngx_memzero(&file, sizeof(ngx_file_t));
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
178
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
179 file.fd = fd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
180 file.name = alcf->user_file;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
181 file.log = r->connection->log;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
182
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
183 state = sw_login;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
184 passwd = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
185 login = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
186 left = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
187 offset = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
188
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
189 for ( ;; ) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
190 n = ngx_read_file(&file, buf + left, NGX_HTTP_AUTH_BUF_SIZE - left,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
191 offset);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
192
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
193 if (n == NGX_ERROR) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
194 ngx_http_auth_basic_close(&file);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
195 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
196 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
197
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
198 if (n == 0) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
199 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
200 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
201
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
202 for (i = left; i < left + n; i++) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
203 switch (state) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
204
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
205 case sw_login:
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
206 if (login == 0 && buf[i] == '#') {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
207 state = sw_skip;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
208 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
209 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
210
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
211 if (buf[i] != auth.data[login]) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
212 state = sw_skip;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
213 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
214 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
215
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
216 if (login == len) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
217 state = sw_passwd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
218 passwd = i + 1;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
219 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
220
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
221 login++;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
222
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
223 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
224
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
225 case sw_passwd:
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
226 if (buf[i] == LF || buf[i] == CR || buf[i] == ':') {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
227 buf[i] = '\0';
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
228
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
229 ngx_http_auth_basic_close(&file);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
230
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
231 pwd.len = i - passwd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
232 pwd.data = &buf[passwd];
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
233
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
234 return ngx_http_auth_basic_crypt_handler(r, NULL, &pwd,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
235 &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
236 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
237
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
238 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
239
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
240 case sw_skip:
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
241 if (buf[i] == LF) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
242 state = sw_login;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
243 login = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
244 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
245
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
246 break;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
247 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
248 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
249
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
250 if (state == sw_passwd) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
251 left = left + n - passwd;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
252 ngx_memcpy(buf, &buf[passwd], left);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
253 passwd = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
254
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
255 } else {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
256 left = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
257 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
258
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
259 offset += n;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
260 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
261
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
262 ngx_http_auth_basic_close(&file);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
263
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
264 return ngx_http_auth_basic_set_realm(r, &alcf->realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
265 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
266
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
267
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
268 static ngx_int_t
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
269 ngx_http_auth_basic_crypt_handler(ngx_http_request_t *r,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
270 ngx_http_auth_basic_ctx_t *ctx, ngx_str_t *passwd, ngx_str_t *realm)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
271 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
272 ngx_int_t rc;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
273 u_char *encrypted;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
274
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
275 rc = ngx_crypt(r->pool, r->headers_in.passwd.data, passwd->data,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
276 &encrypted);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
277
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
278 ngx_log_debug3(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
279 "rc: %d user: \"%V\" salt: \"%s\"",
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
280 rc, &r->headers_in.user, passwd->data);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
281
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
282 if (rc == NGX_OK) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
283 if (ngx_strcmp(encrypted, passwd->data) == 0) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
284 return NGX_OK;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
285 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
286
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
287 ngx_log_debug1(NGX_LOG_DEBUG_HTTP, r->connection->log, 0,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
288 "encrypted: \"%s\"", encrypted);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
289
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
290 return ngx_http_auth_basic_set_realm(r, realm);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
291 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
292
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
293 if (rc == NGX_ERROR) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
294 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
295 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
296
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
297 /* rc == NGX_AGAIN */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
298
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
299 if (ctx == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
300 ctx = ngx_palloc(r->pool, sizeof(ngx_http_auth_basic_ctx_t));
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
301 if (ctx == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
302 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
303 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
304
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
305 ngx_http_set_ctx(r, ctx, ngx_http_auth_basic_module);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
306
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
307 ctx->passwd.len = passwd->len;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
308 passwd->len++;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
309
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
310 ctx->passwd.data = ngx_pstrdup(r->pool, passwd);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
311 if (ctx->passwd.data == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
312 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
313 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
314
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
315 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
316
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
317 /* TODO: add mutex event */
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
318
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
319 return rc;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
320 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
321
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
322
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
323 static ngx_int_t
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
324 ngx_http_auth_basic_set_realm(ngx_http_request_t *r, ngx_str_t *realm)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
325 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
326 r->headers_out.www_authenticate = ngx_list_push(&r->headers_out.headers);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
327 if (r->headers_out.www_authenticate == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
328 return NGX_HTTP_INTERNAL_SERVER_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
329 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
330
58
b55cbf18157e nginx 0.1.29
Igor Sysoev <http://sysoev.ru>
parents: 52
diff changeset
331 r->headers_out.www_authenticate->hash = 1;
52
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
332 r->headers_out.www_authenticate->key.len = sizeof("WWW-Authenticate") - 1;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
333 r->headers_out.www_authenticate->key.data = (u_char *) "WWW-Authenticate";
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
334 r->headers_out.www_authenticate->value = *realm;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
335
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
336 return NGX_HTTP_UNAUTHORIZED;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
337 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
338
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
339 static void
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
340 ngx_http_auth_basic_close(ngx_file_t *file)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
341 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
342 if (ngx_close_file(file->fd) == NGX_FILE_ERROR) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
343 ngx_log_error(NGX_LOG_ALERT, file->log, ngx_errno,
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
344 ngx_close_file_n " \"%s\" failed", file->name.data);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
345 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
346 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
347
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
348
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
349 static void *
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
350 ngx_http_auth_basic_create_loc_conf(ngx_conf_t *cf)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
351 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
352 ngx_http_auth_basic_loc_conf_t *conf;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
353
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
354 conf = ngx_pcalloc(cf->pool, sizeof(ngx_http_auth_basic_loc_conf_t));
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
355 if (conf == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
356 return NGX_CONF_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
357 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
358
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
359 return conf;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
360 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
361
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
362
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
363 static char *
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
364 ngx_http_auth_basic_merge_loc_conf(ngx_conf_t *cf, void *parent, void *child)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
365 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
366 ngx_http_auth_basic_loc_conf_t *prev = parent;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
367 ngx_http_auth_basic_loc_conf_t *conf = child;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
368
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
369 size_t len;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
370 u_char *realm, *p;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
371
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
372 if (conf->realm.data) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
373 if (conf->realm.len) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
374 len = sizeof("Basic realm=\"") - 1 + conf->realm.len + 1;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
375
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
376 realm = ngx_palloc(cf->pool, len);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
377 if (realm == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
378 return NGX_CONF_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
379 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
380
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
381 p = ngx_cpymem(realm, "Basic realm=\"",
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
382 sizeof("Basic realm=\"") - 1);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
383 p = ngx_cpymem(p, conf->realm.data, conf->realm.len);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
384 *p = '"';
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
385
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
386 conf->realm.len = len;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
387 conf->realm.data = realm;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
388 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
389
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
390 } else {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
391 conf->realm = prev->realm;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
392 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
393
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
394
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
395 if (conf->user_file.data) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
396 if (ngx_conf_full_name(cf->cycle, &conf->user_file) != NGX_OK) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
397 return NGX_CONF_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
398 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
399
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
400 } else {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
401 conf->user_file = prev->user_file;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
402 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
403
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
404 return NGX_CONF_OK;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
405 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
406
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
407
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
408 static ngx_int_t
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
409 ngx_http_auth_basic_init(ngx_cycle_t *cycle)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
410 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
411 ngx_http_handler_pt *h;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
412 ngx_http_core_main_conf_t *cmcf;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
413
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
414 cmcf = ngx_http_cycle_get_module_main_conf(cycle, ngx_http_core_module);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
415
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
416 h = ngx_array_push(&cmcf->phases[NGX_HTTP_ACCESS_PHASE].handlers);
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
417 if (h == NULL) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
418 return NGX_ERROR;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
419 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
420
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
421 *h = ngx_http_auth_basic_handler;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
422
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
423 return NGX_OK;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
424 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
425
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
426
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
427 static char *
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
428 ngx_http_auth_basic(ngx_conf_t *cf, void *post, void *data)
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
429 {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
430 ngx_str_t *realm = data;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
431
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
432 if (ngx_strcmp(realm->data, "off") == 0) {
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
433 realm->len = 0;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
434 realm->data = (u_char *) "";
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
435 }
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
436
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
437 return NGX_CONF_OK;
0d75d65c642f nginx 0.1.26
Igor Sysoev <http://sysoev.ru>
parents:
diff changeset
438 }