NAME

khttpbasic_validate — validate an HTTP basic authorisation request

LIBRARY

library “libkcgi”

SYNOPSIS

#include <sys/types.h>
#include <stdarg.h>
#include <stdint.h>
#include <kcgi.h>

int
khttpbasic_validate(struct kreq *req, const char *user, const char *password);

DESCRIPTION

The khttpbasic_validate() function validates the given user and password with the HTTP “basic” or “bearer” authorised request req as returned by khttp_parse(3) or khttp_fcgi_parse(3).

In both cases, the request is validated by base64-encoding user:password and comparing it to the given token.

RETURN VALUES

khttpbasic_validate() will return zero if validation failed, less than zero if the request was not properly set up for HTTP basic or bearer validation (no HTTP method, not a basic or bearer request, not already authenticated by the web server), or greater than zero if the validation succeeded.

EXAMPLES

In the following fragment, assume r a pointer to a struct kreq successfully initialised by khttp_parse(3). If validation is not provided, it returns an HTTP 401. The expected principle is "james", password "bond". Otherwise, it returns an HTTP 200.

if (khttpbasic_validate(r, "james", "bond") <= 0) {
  khttp_head(r, kresps[KRESP_STATUS],
    "%s", khttps[KHTTP_401]);
  khttp_head(r, kresps[KRESP_WWW_AUTHENTICATE],
    "basic realm=\"%s\"", "some realm");
} else
  khttp_head(r, kresps[KRESP_STATUS],
    "%s", khttps[KHTTP_200]);

SEE ALSO

kcgi(3), khttp_fcgi_parse(3), khttp_parse(3), khttpdigest_validate(3)

AUTHORS

Written by Kristaps Dzonsons <kristaps@bsd.lv>.