2 * uhttpd - Tiny single-threaded httpd
4 * Copyright (C) 2010-2012 Jo-Philipp Wich <xm@subsignal.org>
5 * Copyright (C) 2012 Felix Fietkau <nbd@openwrt.org>
7 * Licensed under the Apache License, Version 2.0 (the "License");
8 * you may not use this file except in compliance with the License.
9 * You may obtain a copy of the License at
11 * http://www.apache.org/licenses/LICENSE-2.0
13 * Unless required by applicable law or agreed to in writing, software
14 * distributed under the License is distributed on an "AS IS" BASIS,
15 * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
16 * See the License for the specific language governing permissions and
17 * limitations under the License.
21 #define _XOPEN_SOURCE 700
24 static LIST_HEAD(auth_realms);
26 void uh_auth_add(const char *path, const char *user, const char *pass)
28 struct auth_realm *new = NULL;
30 const char *new_pass = NULL;
31 char *dest_path, *dest_user, *dest_pass;
37 /* given password refers to a passwd entry */
38 if ((strlen(pass) > 3) && !strncmp(pass, "$p$", 3)) {
40 /* try to resolve shadow entry */
41 spwd = getspnam(&pass[3]);
43 new_pass = spwd->sp_pwdp;
46 pwd = getpwnam(&pass[3]);
47 if (pwd && pwd->pw_passwd && pwd->pw_passwd[0] &&
48 pwd->pw_passwd[0] != '!')
49 new_pass = pwd->pw_passwd;
55 if (!new_pass || !new_pass[0])
58 new = calloc_a(sizeof(*new),
59 &dest_path, strlen(path) + 1,
60 &dest_user, strlen(user) + 1,
61 &dest_pass, strlen(new_pass) + 1);
66 new->path = strcpy(dest_path, path);
67 new->user = strcpy(dest_user, user);
68 new->pass = strcpy(dest_pass, new_pass);
69 list_add(&new->list, &auth_realms);
72 bool uh_auth_check(struct client *cl, struct path_info *pi)
74 struct http_request *req = &cl->request;
75 struct auth_realm *realm;
76 bool user_match = false;
81 if (pi->auth && !strncasecmp(pi->auth, "Basic ", 6)) {
82 const char *auth = pi->auth + 6;
84 uh_b64decode(uh_buf, sizeof(uh_buf), auth, strlen(auth));
85 pass = strchr(uh_buf, ':');
93 plen = strlen(pi->name);
94 list_for_each_entry(realm, &auth_realms, list) {
95 int rlen = strlen(realm->path);
100 if (strncasecmp(pi->name, realm->path, rlen) != 0)
107 if (strcmp(user, realm->user) != 0)
117 if (user_match && !strcmp(crypt(pass, realm->pass), realm->pass))
120 uh_http_header(cl, 401, "Authorization Required");
121 ustream_printf(cl->us,
122 "WWW-Authenticate: Basic realm=\"%s\"\r\n"
123 "Content-Type: text/plain\r\n\r\n",
125 uh_chunk_printf(cl, "Authorization Required\n");