forked from vmware-archive/atc
/
validator.go
81 lines (61 loc) · 1.99 KB
/
validator.go
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
package auth
import (
"encoding/base64"
"errors"
"net/http"
"strings"
"code.google.com/p/go.crypto/bcrypt"
)
var ErrUnparsableHeader = errors.New("cannot parse 'Authorization' header")
//go:generate counterfeiter . Validator
type Validator interface {
IsAuthenticated(*http.Request) bool
}
type NoopValidator struct{}
func (NoopValidator) IsAuthenticated(*http.Request) bool { return true }
type BasicAuthHashedValidator struct {
Username string
HashedPassword string
}
func (validator BasicAuthHashedValidator) IsAuthenticated(r *http.Request) bool {
auth := r.Header.Get("Authorization")
username, password, err := ExtractUsernameAndPassword(auth)
if err != nil {
return false
}
return validator.correctCredentials(username, password)
}
func (validator BasicAuthHashedValidator) correctCredentials(username string, password string) bool {
err := bcrypt.CompareHashAndPassword([]byte(validator.HashedPassword), []byte(password))
return validator.Username == username && err == nil
}
type BasicAuthValidator struct {
Username string
Password string
}
func (validator BasicAuthValidator) IsAuthenticated(r *http.Request) bool {
auth := r.Header.Get("Authorization")
username, password, err := ExtractUsernameAndPassword(auth)
if err != nil {
return false
}
return validator.correctCredentials(username, password)
}
func (validator BasicAuthValidator) correctCredentials(username string, password string) bool {
return validator.Username == username && validator.Password == password
}
func ExtractUsernameAndPassword(authorizationHeader string) (string, string, error) {
if !strings.HasPrefix(authorizationHeader, "Basic ") {
return "", "", ErrUnparsableHeader
}
encodedCredentials := authorizationHeader[6:]
credentials, err := base64.StdEncoding.DecodeString(encodedCredentials)
if err != nil {
return "", "", ErrUnparsableHeader
}
parts := strings.Split(string(credentials), ":")
if len(parts) != 2 {
return "", "", ErrUnparsableHeader
}
return parts[0], parts[1], nil
}