ó ú2ec@sēdZddlmZddlZddlmZddlTdefd„ƒYZdefd „ƒYZ e Z dgZ d „Z d e krŪddlZejd ejƒndS( sŽ Basic HTTP/1.0 Authentication This module implements ``Basic`` authentication as described in HTTP/1.0 specification [1]_ . Do not use this module unless you are using SSL or need to work with very out-dated clients, instead use ``digest`` authentication. >>> from paste.wsgilib import dump_environ >>> from paste.httpserver import serve >>> # from paste.auth.basic import AuthBasicHandler >>> realm = 'Test Realm' >>> def authfunc(environ, username, password): ... return username == password >>> serve(AuthBasicHandler(dump_environ, realm, authfunc)) serving on... .. [1] http://www.w3.org/Protocols/HTTP/1.0/draft-ietf-http-spec.html#BasicAA iĸĸĸĸ(t b64decodeN(tHTTPUnauthorized(t*tAuthBasicAuthenticatorcBs5eZdZdZd„Zd„Zd„ZeZRS(s5 implements ``Basic`` authentication details tbasiccCs||_||_dS(N(trealmtauthfunc(tselfRR((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyt__init__"s cCs#tjd|jƒ}td|ƒS(NsBasic realm="%s"theaders(tWWW_AUTHENTICATEttuplesRR(Rthead((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pytbuild_authentication&scCsŊt|ƒ}|s|jƒS|jddƒ\}}d|jƒkrP|jƒStjttj|jƒƒƒƒ}|jddƒ\}}|j |||ƒrĨ|S|jƒS(Nt iRt:( t AUTHORIZATIONR tsplittlowertsixt ensure_textRt ensure_binarytstripR(Rtenviront authorizationtauthmethtauthtusernametpassword((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyt authenticate*s   $(t__name__t __module__t__doc__ttypeRR Rt__call__(((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyRs    tAuthBasicHandlercBs eZdZd„Zd„ZRS(s/ HTTP/1.0 ``Basic`` authentication middleware Parameters: ``application`` The application object is called only upon successful authentication, and can assume ``environ['REMOTE_USER']`` is set. If the ``REMOTE_USER`` is already set, this middleware is simply pass-through. ``realm`` This is a identifier for the authority that is requesting authorization. It is shown to the user and should be unique within the domain it is being used. ``authfunc`` This is a mandatory user-defined function which takes a ``environ``, ``username`` and ``password`` for its first three arguments. It should return ``True`` if the user is authenticated. cCs||_t||ƒ|_dS(N(t applicationRR(RR$RR((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyRTs cCsvt|ƒ}|sf|j|ƒ}t|tƒrStj|dƒtj||ƒqf|j||ƒSn|j||ƒS(NR(t REMOTE_USERRt isinstancetstrt AUTH_TYPEtupdatetwsgi_applicationR$(RRtstart_responseRtresult((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyR"Xs (RRR RR"(((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyR#9s cKsVddlm}ddl}||ƒ}t||jƒsFtdƒ‚t|||ƒS(sĖ Grant access via basic authentication Config looks like this:: [filter:grant] use = egg:Paste#auth_basic realm=myrealm authfunc=somepackage.somemodule:somefunction iĸĸĸĸ(t eval_importNs#authfunc must resolve to a function(tpaste.util.import_stringR-ttypesR&t FunctionTypetAssertionErrorR#(tappt global_confRRtkwR-R/((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyt make_basicgs   t__main__t optionflags(R tbase64RRtpaste.httpexceptionsRtpaste.httpheaderstobjectRR#t middlewaret__all__R5RtdoctestttestmodtELLIPSIS(((s:/usr/local/lib/python2.7/dist-packages/paste/auth/basic.pyts  *