auth.h File Reference

#include "httpdconfig.h"

Include dependency graph for auth.h:

This graph shows which files directly or indirectly include this file:

Go to the source code of this file.

Macros
#define	HTTP_AUTH_REALM   "Protected"
#define	HTTPD_AUTH_SINGLE   0
#define	HTTPD_AUTH_CALLBACK   1
#define	AUTH_MAX_USER_LEN   32
#define	AUTH_MAX_PASS_LEN   32

Typedefs
typedef int(*	AuthGetUserPw) (HttpdConnData *connData, int no, char *user, int userLen, char *pass, int passLen)

Functions
int ICACHE_FLASH_ATTR	authBasic (HttpdConnData *connData)

Macro Definition Documentation

AUTH_MAX_PASS_LEN

#define AUTH_MAX_PASS_LEN   32

Definition at line 14 of file auth.h.

Referenced by authBasic().

AUTH_MAX_USER_LEN

#define AUTH_MAX_USER_LEN   32

Definition at line 13 of file auth.h.

Referenced by authBasic().

HTTP_AUTH_REALM

#define HTTP_AUTH_REALM   "Protected"

Definition at line 7 of file auth.h.

Referenced by authBasic().

HTTPD_AUTH_CALLBACK

#define HTTPD_AUTH_CALLBACK   1

Definition at line 11 of file auth.h.

HTTPD_AUTH_SINGLE

#define HTTPD_AUTH_SINGLE   0

Definition at line 10 of file auth.h.

Typedef Documentation

AuthGetUserPw

typedef int(* AuthGetUserPw) (HttpdConnData *connData, int no, char *user, int userLen, char *pass, int passLen)

Definition at line 18 of file auth.h.

Function Documentation

authBasic()

int ICACHE_FLASH_ATTR authBasic

(

HttpdConnData *

connData

)

Definition at line 20 of file auth.c.

References AUTH_MAX_PASS_LEN, AUTH_MAX_USER_LEN, base64_decode(), HttpdConnData::cgiArg, HttpdConnData::conn, HTTP_AUTH_REALM, HTTPD_CGI_AUTHENTICATED, HTTPD_CGI_DONE, httpdEndHeaders(), httpdGetHeader(), httpdHeader(), httpdSend(), httpdStartResponse(), NULL, os_strcmp, os_strncmp, strlen, and strncmp.

                                                         {
    const char *forbidden="401 Forbidden.";
    int no=0;
    int r;
    char hdr[(AUTH_MAX_USER_LEN+AUTH_MAX_PASS_LEN+2)*10];
    char userpass[AUTH_MAX_USER_LEN+AUTH_MAX_PASS_LEN+2];
    char user[AUTH_MAX_USER_LEN];
    char pass[AUTH_MAX_PASS_LEN];
    if (connData->conn==NULL) {
        //Connection aborted. Clean up.
        return HTTPD_CGI_DONE;
    }

    r=httpdGetHeader(connData, "Authorization", hdr, sizeof(hdr));
    if (r && strncmp(hdr, "Basic", 5)==0) {
        r=base64_decode(strlen(hdr)-6, hdr+6, sizeof(userpass), (unsigned char *)userpass);
        if (r<0) r=0; //just clean out string on decode error
        userpass[r]=0; //zero-terminate user:pass string
//      os_printf("Auth: %s\n", userpass);
        while (((AuthGetUserPw)(connData->cgiArg))(connData, no,
                user, AUTH_MAX_USER_LEN, pass, AUTH_MAX_PASS_LEN)) {
            //Check user/pass against auth header
            if (strlen(userpass)==strlen(user)+strlen(pass)+1 &&
                    os_strncmp(userpass, user, strlen(user))==0 &&
                    userpass[strlen(user)]==':' &&
                    os_strcmp(userpass+strlen(user)+1, pass)==0) {
                //Authenticated. Yay!
                return HTTPD_CGI_AUTHENTICATED;
            }
            no++; //Not authenticated with this user/pass. Check next user/pass combo.
        }
    }

    //Not authenticated. Go bug user with login screen.
    httpdStartResponse(connData, 401);
    httpdHeader(connData, "Content-Type", "text/plain");
    httpdHeader(connData, "WWW-Authenticate", "Basic realm=\""HTTP_AUTH_REALM"\"");
    httpdEndHeaders(connData);
    httpdSend(connData, forbidden, -1);
    //Okay, all done.
    return HTTPD_CGI_DONE;
}

Here is the call graph for this function: