static gboolean
check_password (SoupAuthDomain *domain,
SoupMessage *msg,
const char *username,
const char *password)
{
const char *header;
GHashTable *params;
const char *msg_username;
char hex_urp[33];
gboolean accept;
header = soup_message_headers_get_one (msg->request_headers,
"Authorization");
if (strncmp (header, "Digest ", 7) != 0)
return FALSE;
params = soup_header_parse_param_list (header + 7);
if (!params)
return FALSE;
msg_username = g_hash_table_lookup (params, "username");
if (!msg_username || strcmp (msg_username, username) != 0) {
soup_header_free_param_list (params);
return FALSE;
}
soup_auth_digest_compute_hex_urp (username,
soup_auth_domain_get_realm (domain),
password, hex_urp);
accept = check_hex_urp (domain, msg, params, username, hex_urp);
soup_header_free_param_list (params);
return accept;
}
/**
@brief Filter all localhost / 127.0.0.1 queries, with no auth
*/
static
gboolean sim_server_api_auth_filter (SoupAuthDomain *domain,
SoupMessage *msg,
gpointer user_data)
{
gboolean result = TRUE;
(void) user_data;
SoupURI *uri = NULL;
/* Read the mess*/
if (msg != NULL && domain != NULL)
{
if (strcmp (soup_auth_domain_get_realm (domain), "ossim api") == 0)
{
if ((uri = soup_message_get_uri (msg)) != NULL)
{
if (strcmp (uri->host,"localhost") == 0 || strcmp (uri->host,"127.0.0.1") == 0)
{
if (uri->port == SERVER_API_PORT)
{
return FALSE;
}
}
}
}
}
return result;
}
static char *
soup_auth_domain_basic_challenge (SoupAuthDomain *domain, SoupMessage *msg)
{
GString *challenge;
challenge = g_string_new ("Basic ");
soup_header_g_string_append_param (challenge, "realm", soup_auth_domain_get_realm (domain));
return g_string_free (challenge, FALSE);
}
static char *
challenge (SoupAuthDomain *domain, SoupMessage *msg)
{
GString *str;
str = g_string_new ("Digest ");
soup_header_g_string_append_param_quoted (str, "realm", soup_auth_domain_get_realm (domain));
g_string_append_printf (str, ", nonce=\"%lu%lu\"",
(unsigned long) msg,
(unsigned long) time (0));
g_string_append_printf (str, ", qop=\"auth\"");
g_string_append_printf (str, ", algorithm=MD5");
return g_string_free (str, FALSE);
}
/**
* soup_auth_domain_digest_new:
* @optname1: name of first option, or %NULL
* @...: option name/value pairs
*
* Creates a #SoupAuthDomainDigest. You must set the
* %SOUP_AUTH_DOMAIN_REALM parameter, to indicate the realm name to be
* returned with the authentication challenge to the client. Other
* parameters are optional.
*
* Return value: the new #SoupAuthDomain
**/
SoupAuthDomain *
soup_auth_domain_digest_new (const char *optname1, ...)
{
SoupAuthDomain *domain;
va_list ap;
va_start (ap, optname1);
domain = (SoupAuthDomain *)g_object_new_valist (SOUP_TYPE_AUTH_DOMAIN_DIGEST,
optname1, ap);
va_end (ap);
g_return_val_if_fail (soup_auth_domain_get_realm (domain) != NULL, NULL);
return domain;
}
static gboolean
check_hex_urp (SoupAuthDomain *domain, SoupMessage *msg,
GHashTable *params, const char *username,
const char *hex_urp)
{
const char *uri, *qop, *realm, *msg_username;
const char *nonce, *nc, *cnonce, *response;
char hex_a1[33], computed_response[33];
int nonce_count;
SoupURI *dig_uri, *req_uri;
msg_username = g_hash_table_lookup (params, "username");
if (!msg_username || strcmp (msg_username, username) != 0)
return FALSE;
/* Check uri */
uri = g_hash_table_lookup (params, "uri");
if (!uri)
return FALSE;
req_uri = soup_message_get_uri (msg);
dig_uri = soup_uri_new (uri);
if (dig_uri) {
if (!soup_uri_equal (dig_uri, req_uri)) {
soup_uri_free (dig_uri);
return FALSE;
}
soup_uri_free (dig_uri);
} else {
char *req_path;
req_path = soup_uri_to_string (req_uri, TRUE);
if (strcmp (uri, req_path) != 0) {
g_free (req_path);
return FALSE;
}
g_free (req_path);
}
/* Check qop; we only support "auth" for now */
qop = g_hash_table_lookup (params, "qop");
if (!qop || strcmp (qop, "auth") != 0)
return FALSE;
/* Check realm */
realm = g_hash_table_lookup (params, "realm");
if (!realm || strcmp (realm, soup_auth_domain_get_realm (domain)) != 0)
return FALSE;
nonce = g_hash_table_lookup (params, "nonce");
if (!nonce)
return FALSE;
nc = g_hash_table_lookup (params, "nc");
if (!nc)
return FALSE;
nonce_count = strtoul (nc, NULL, 16);
if (nonce_count <= 0)
return FALSE;
cnonce = g_hash_table_lookup (params, "cnonce");
if (!cnonce)
return FALSE;
response = g_hash_table_lookup (params, "response");
if (!response)
return FALSE;
soup_auth_digest_compute_hex_a1 (hex_urp,
SOUP_AUTH_DIGEST_ALGORITHM_MD5,
nonce, cnonce, hex_a1);
soup_auth_digest_compute_response (msg->method, uri,
hex_a1,
SOUP_AUTH_DIGEST_QOP_AUTH,
nonce, cnonce, nonce_count,
computed_response);
return strcmp (response, computed_response) == 0;
}
