BasicAuthentication.cpp

Go to the documentation of this file.

/*
 * SNode.C - A Slim Toolkit for Network Communication
 * Copyright (C) Volker Christian <me@vchrist.at>
 *               2020, 2021, 2022, 2023, 2024, 2025
 *
 * This program is free software: you can redistribute it and/or modify
 * it under the terms of the GNU Lesser General Public License as published
 * by the Free Software Foundation, either version 3 of the License, or
 * (at your option) any later version.
 *
 * This program is distributed in the hope that it will be useful,
 * but WITHOUT ANY WARRANTY; without even the implied warranty of
 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
 * GNU Lesser General Public License for more details.
 *
 * You should have received a copy of the GNU Lesser General Public License
 * along with this program. If not, see <http://www.gnu.org/licenses/>.
 */
 
/*
 * MIT License
 *
 * Permission is hereby granted, free of charge, to any person obtaining a copy
 * of this software and associated documentation files (the "Software"), to deal
 * in the Software without restriction, including without limitation the rights
 * to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
 * copies of the Software, and to permit persons to whom the Software is
 * furnished to do so, subject to the following conditions:
 *
 * The above copyright notice and this permission notice shall be included in
 * all copies or substantial portions of the Software.
 *
 * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
 * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
 * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
 * AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
 * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
 * OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
 * THE SOFTWARE.
 */
 
#include "express/middleware/BasicAuthentication.h"
 
#ifndef DOXYGEN_SHOULD_SKIP_THIS
 
#include "utils/base64.h"
#include "web/http/http_utils.h"
 
#include <list>
#include <utility>
 
#endif /* DOXYGEN_SHOULD_SKIP_THIS */
 
namespace express::middleware {
 
    BasicAuthentication::BasicAuthentication(const std::string& userName, const std::string& password, const std::string& realm) {
        std::string userNamePassword = userName + ":" + password;
        const std::string credentials =
            base64::base64_encode(reinterpret_cast<unsigned char*>(userNamePassword.data()), userNamePassword.length());
 
        use([realm, credentials] MIDDLEWARE(req, res, next) {
            const std::string authCredentials = httputils::str_split(req->get("Authorization"), ' ').second;
 
            if (authCredentials == credentials) {
                next();
            } else {
                if (authCredentials.empty()) {
                    res->set("WWW-Authenticate", "Basic realm=\"" + realm + "\"");
                }
                res->sendStatus(401);
            }
        });
    }
 
    class BasicAuthentication&
    BasicAuthentication::instance(const std::string& userName, const std::string& password, const std::string& realm) {
        // Keep the created authentication middleware alive
        static std::list<std::shared_ptr<class BasicAuthentication>> basicAuthentications;
 
        BasicAuthentication* basicAuthentication = new BasicAuthentication(userName, password, realm);
        basicAuthentications.push_back(std::shared_ptr<BasicAuthentication>(basicAuthentication));
 
        return *basicAuthentication;
    }
 
    class BasicAuthentication& BasicAuthentication(const std::string& userName, const std::string& password, const std::string& realm) {
        return BasicAuthentication::instance(userName, password, realm);
    }
 
} // namespace express::middleware