arno/gns3-server
1
0
Fork 0
mirror of https://github.com/GNS3/gns3-server synced 2024-11-28 11:18:11 +00:00
Code Issues Releases Wiki Activity

Basic Auth support

Browse Source
This commit is contained in:
Julien Duponchelle 2015-06-03 15:38:34 +02:00
parent b344def887
commit 78891ae00e
1 changed files with 29 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
gns3server/web/route.py
View File

@ -83,6 +83,28 @@ class Route(object):
def delete(cls, path, *args, **kw): def delete(cls, path, *args, **kw):
return cls._route('DELETE', path, *args, **kw) return cls._route('DELETE', path, *args, **kw)
@classmethod
def authenticate(cls, request, route, server_config):
"""
Ask user for authentication
:returns: Response if you need to auth the user otherwise None
"""
user = server_config.get("user", "").strip()
password = server_config.get("password", "").strip()
if len(user) == 0:
return
if "AUTHORIZATION" in request.headers:
if request.headers["AUTHORIZATION"] == aiohttp.helpers.BasicAuth(user, password).encode():
return
response = Response(request=request, route=route)
response.set_status(401)
response.headers["WWW-Authenticate"] = 'Basic realm="GNS3 server"'
return response
@classmethod @classmethod
def _route(cls, method, path, *args, **kw): def _route(cls, method, path, *args, **kw):
# This block is executed only the first time # This block is executed only the first time
@ -118,6 +140,13 @@ class Route(object):
def control_schema(request): def control_schema(request):
# This block is executed at each method call # This block is executed at each method call
server_config = Config.instance().get_section_config("Server")
# Authenticate
response = cls.authenticate(request, route, server_config)
if response:
return response
# Non API call # Non API call
if api_version is None: if api_version is None:
response = Response(request=request, route=route, output_schema=output_schema) response = Response(request=request, route=route, output_schema=output_schema)
@ -127,7 +156,6 @@ class Route(object):
# API call # API call
try: try:
request = yield from parse_request(request, input_schema) request = yield from parse_request(request, input_schema)
server_config = Config.instance().get_section_config("Server")
record_file = server_config.get("record") record_file = server_config.get("record")
if record_file: if record_file:
try: try: