mirror of
https://github.com/honojs/hono.git
synced 2024-12-01 10:51:01 +00:00
66 lines
1.8 KiB
TypeScript
66 lines
1.8 KiB
TypeScript
import type { Context } from '../../context.ts'
|
|
import type { Next } from '../../hono.ts'
|
|
import { timingSafeEqual } from '../../utils/buffer.ts'
|
|
import { decodeBase64 } from '../../utils/encode.ts'
|
|
|
|
const CREDENTIALS_REGEXP = /^ *(?:[Bb][Aa][Ss][Ii][Cc]) +([A-Za-z0-9._~+/-]+=*) *$/
|
|
const USER_PASS_REGEXP = /^([^:]*):(.*)$/
|
|
|
|
const auth = (req: Request) => {
|
|
const match = CREDENTIALS_REGEXP.exec(req.headers.get('Authorization') || '')
|
|
if (!match) {
|
|
return undefined
|
|
}
|
|
|
|
const userPass = USER_PASS_REGEXP.exec(decodeBase64(match[1]))
|
|
|
|
if (!userPass) {
|
|
return undefined
|
|
}
|
|
|
|
return { username: userPass[1], password: userPass[2] }
|
|
}
|
|
|
|
export const basicAuth = (
|
|
options: { username: string; password: string; realm?: string; hashFunction?: Function },
|
|
...users: { username: string; password: string }[]
|
|
) => {
|
|
if (!options) {
|
|
throw new Error('basic auth middleware requires options for "username and password"')
|
|
}
|
|
|
|
if (!options.realm) {
|
|
options.realm = 'Secure Area'
|
|
}
|
|
users.unshift({ username: options.username, password: options.password })
|
|
|
|
return async (ctx: Context, next: Next) => {
|
|
const requestUser = auth(ctx.req)
|
|
if (requestUser) {
|
|
for (const user of users) {
|
|
const usernameEqual = await timingSafeEqual(
|
|
user.username,
|
|
requestUser.username,
|
|
options.hashFunction
|
|
)
|
|
const passwordEqual = await timingSafeEqual(
|
|
user.password,
|
|
requestUser.password,
|
|
options.hashFunction
|
|
)
|
|
if (usernameEqual && passwordEqual) {
|
|
// Authorized OK
|
|
await next()
|
|
return
|
|
}
|
|
}
|
|
}
|
|
ctx.res = new Response('Unauthorized', {
|
|
status: 401,
|
|
headers: {
|
|
'WWW-Authenticate': 'Basic realm="' + options.realm?.replace(/"/g, '\\"') + '"',
|
|
},
|
|
})
|
|
}
|
|
}
|