source: LATMOS-Accounts-Web/patch/basic_auth.patch @ 883

lib/LATMOS/Accounts/Web.pm

@@ -42 +42 @@
 __PACKAGE__->config( name => 'LATMOS::Accounts::Web' );
 
 __PACKAGE__->config->{'Plugin::Authentication'} = {
-    default_realm => 'la',
+    default_realm => 'remote',
     realms => {
+        remote => {
+            credential => {
+                class => 'Remote'
+            },
+            store => {
+                class => 'Null',
+            },
+        },
         la => {
             credential => {
                 class => 'La'

lib/LATMOS/Accounts/Web/Controller/Root.pm

@@ -56 +56 @@
 sub logout : Local {
     my ( $self, $c ) = @_;
     $c->logout;
-    $c->res->redirect($c->uri_for('/'));
+    #$c->res->status(418);
+
 }
 
 =head1 AUTHOR

lib/LATMOS/Accounts/Web/Controller.pm

@@ -3 +3 @@
 use strict;
 use warnings;
 use base 'Catalyst::Controller';
+use MIME::Base64;
 
 =head1 NAME
 
@@ -20 +21 @@
 
 =cut
 
+sub auth_required : Private {
+    my ( $self, $c ) = @_;
+    $c->res->status(401);
+    $c->res->content_type('text/plain');
+    $c->res->body('Authorization required.');
+    $c->res->headers->push_header(
+        'WWW-Authenticate' => 'Basic realm="Link::Accounts"'
+    );
+}
+
 sub begin : Private {
     my ( $self, $c ) = @_;
 
-    if (!$c->user_exists) {
+    if ($c->user_exists) {
+        # Set login user:
+        warn $c->model('Accounts')->db->{_user} = $c->user->{username};
+    } else {
         # No need to login for About section
         if ($c->namespace ne 'about') {
-            if ($c->req->path ne 'login') {
-                $c->forward('/login');
+            if ($c->authenticate({}, 'remote')) {
+                # Set login user:
+                $c->model('Accounts')->db->{_user} = $c->user->{username};
+            } elsif (my $authheader = $c->req->headers->header('Authorization')) {
+                # TODO check auth type
+                my ($type, $base64) = $authheader =~ /(\w+) (\S+)/;
+                my ($login, $pass) = decode_base64($base64) =~ /^([^:]+):(.*)/;
+                if (!$c->authenticate({ 
+                            username => $login,
+                            password => $pass }, 'la')) {
+                    $c->forward('auth_required');
+                    return;
+                }
+            } else {
+                $c->forward('auth_required');
+                return;
             }
-            return;
         }
-    } else {
-        $c->model('Accounts')->db->connect(
-            $c->user->{username},
-            $c->user->{password});
     }
 }
 
@@ -51 +74 @@
 
 sub end : ActionClass('RenderView') {
     my ($self, $c) = @_;
-    $c->forward($c->view('TT'));
+    $c->forward($c->view('TT')) unless($c->res->body);
     $c->model('Accounts')->db->rollback;
     $c->model('Accounts')->call_batch_sync;
 }