blob: 901f3182a02d0b5aa7f51894557e8f48a70a467a (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
|
/*
Copyright(c) 2017 AT&T Intellectual Property. All rights reserved.
Licensed under the Apache License, Version 2.0 (the "License");
you may not use this file except in compliance with the License.
You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR
CONDITIONS OF ANY KIND, either express or implied.
See the License for the specific language governing permissions and limitations under the License.
*/
/* HTTP Basic Authentication */
"use strict";
/* Extract user name and password from the 'Authorization' header */
const parseAuthHeader = function(authHeader){
var parsedHeader = {};
const authItems = authHeader.split(/\s+/); // Split on the white space between Basic and the base64 encoded user:password
if (authItems[0].toLowerCase() === 'basic') {
if (authItems[1]) {
const authString = (new Buffer(authItems[1], 'base64')).toString();
const userpass = authString.split(':');
if (userpass.length > 1) {
parsedHeader = {user: userpass[0], password: userpass[1]};
}
}
}
return parsedHeader;
};
/* Middleware function to check authentication */
exports.checkAuth = function(req, res, next) {
const auth = process.mainModule.exports.config.auth;
if (auth) {
/* Authentication is configured */
if (req.headers.authorization) {
const creds = parseAuthHeader(req.headers.authorization);
if (creds.user && creds.password && (creds.user in auth) && (auth[creds.user] === creds.password)) {
next();
}
else {
var err = new Error('Authentication required');
err.status = 403;
next(err);
}
}
else {
var errx = new Error ('Authentication required');
errx.status = 403;
next(errx);
}
}
else {
next(); // Nothing to do, no authentication required
}
};
|
