Bugzilla/Quantum/Plugin/BasicAuth.pm


1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40

# This Source Code Form is subject to the terms of the Mozilla Public
# License, v. 2.0. If a copy of the MPL was not distributed with this
# file, You can obtain one at http://mozilla.org/MPL/2.0/.
#
# This Source Code Form is "Incompatible With Secondary Licenses", as
# defined by the Mozilla Public License, v. 2.0.
package Bugzilla::Quantum::Plugin::BasicAuth;
use 5.10.1;
use Mojo::Base qw(Mojolicious::Plugin);

use Bugzilla::Logging;
use Carp;

sub register {
    my ( $self, $app, $conf ) = @_;

    $app->renderer->add_helper(
        basic_auth => sub {
            my ($c, $realm, $auth_user, $auth_pass) = @_;
            my $req = $c->req;
            my ($user, $password) = $req->url->to_abs->userinfo =~ /^([^:]+):(.*)/;

            unless ($realm && $auth_user && $auth_pass) {
                croak 'basic_auth() called with missing parameters.';
            }

            unless ($user eq $auth_user && $password eq $auth_pass) {
                WARN('username and password do not match');
                $c->res->headers->www_authenticate("Basic realm=\"$realm\"");
                $c->res->code(401);
                $c->rendered;
                return 0;
            }

            return 1;
        }
    );
}

1;