jlelse
/
GoShort
1
Fork 0
Code Packages

Support basic auth

This commit is contained in:
Jan-Lukas Else 2020-03-29 13:08:47 +02:00
parent 9a22f4b3e5
commit a0eeac4eb1
1 changed files with 18 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
main.go
View File

@ -77,6 +77,10 @@ func MigrateDatabase() {
}
func ShortenHandler(w http.ResponseWriter, r *http.Request) {
if !checkPassword(w, r) {
return
}
writeShortenedUrl := func(w http.ResponseWriter, slug string) {
shortenedUrl, err := url.Parse(viper.GetString("shortUrl"))
if err != nil {
@ -87,12 +91,6 @@ func ShortenHandler(w http.ResponseWriter, r *http.Request) {
_, _ = w.Write([]byte(shortenedUrl.String()))
}
password := r.URL.Query().Get("password")
if password != viper.GetString("password") {
http.Error(w, "Wrong password", http.StatusBadRequest)
return
}
requestUrl := r.URL.Query().Get("url")
if requestUrl == "" {
http.Error(w, "url parameter not set", http.StatusBadRequest)
@ -138,9 +136,7 @@ func ShortenHandler(w http.ResponseWriter, r *http.Request) {
}
func DeleteHandler(w http.ResponseWriter, r *http.Request) {
password := r.URL.Query().Get("password")
if password != viper.GetString("password") {
http.Error(w, "Wrong password", http.StatusBadRequest)
if !checkPassword(w, r) {
return
}
@ -170,6 +166,19 @@ func DeleteHandler(w http.ResponseWriter, r *http.Request) {
_, _ = w.Write([]byte("Slug deleted"))
}
func checkPassword(w http.ResponseWriter, r *http.Request) bool {
if r.URL.Query().Get("password") == viper.GetString("password") {
return true
}
_, pass, ok := r.BasicAuth()
if !(ok && pass == viper.GetString("password")) {
w.Header().Set("WWW-Authenticate", `Basic realm="Please enter a password!"`)
http.Error(w, "Not authenticated", http.StatusUnauthorized)
return false
}
return true
}
func generateSlug() string {
var chars = []rune("0123456789abcdefghijklmnopqrstuvwxyz")
s := make([]rune, 6)