      1
      2
      3
      4
      5
      6
      7
      8
      9
     10
     11
     12
     13
     14
     15
     16
     17
     18
     19
     20
     21
     22
     23
     24
     25
     26
     27
     28
     29
     30
     31
     32
     33
     34
     35
     36
     37
     38
     39
     40
     41
     42
     43
     44
     45
     46
     47
     48
     49
     50
     51
     52
     53
     54
     55
     56
     57
     58
     59
     60
     61
     62
     63
     64
     65
     66
     67
     68
     69
     70
     71
     72
     73
     74
     75
     76
     77
     78
     79
     80
     81
     82
     83
     84
     85
     86
     87
     88
     89
     90
     91
     92
     93
     94
     95
     96
     97
     98
     99
    100
    101
    102
    103
    104
    105
    106

    // Copyright 2015-2017 Parity Technologies (UK) Ltd.
    // This file is part of Parity.

    // Parity is free software: you can redistribute it and/or modify
    // it under the terms of the GNU General Public License as published by
    // the Free Software Foundation, either version 3 of the License, or
    // (at your option) any later version.

    // Parity is distributed in the hope that it will be useful,
    // but WITHOUT ANY WARRANTY; without even the implied warranty of
    // MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    // GNU General Public License for more details.

    // You should have received a copy of the GNU General Public License
    // along with Parity.  If not, see <http://www.gnu.org/licenses/>.

    //! HTTP Authorization implementations

    use std::collections::HashMap;
    use hyper::{server, net, header, status};
    use endpoint::Handler;
    use handlers::{AuthRequiredHandler, ContentHandler};

    /// Authorization result
    pub enum Authorized {
    	/// Authorization was successful.
    	Yes,
    	/// Unsuccessful authorization. Handler for further work is returned.
    	No(Box<Handler>),
    }

    /// Authorization interface
    pub trait Authorization : Send + Sync {
    	/// Checks if authorization is valid.
    	fn is_authorized(&self, req: &server::Request<net::HttpStream>)-> Authorized;
    }

    /// HTTP Basic Authorization handler
    pub struct HttpBasicAuth {
    	users: HashMap<String, String>,
    }

    /// No-authorization implementation (authorization disabled)
    pub struct NoAuth;

    impl Authorization for NoAuth {
    	fn is_authorized(&self, _req: &server::Request<net::HttpStream>)-> Authorized {
    		Authorized::Yes
    	}
    }

    impl Authorization for HttpBasicAuth {
    	fn is_authorized(&self, req: &server::Request<net::HttpStream>) -> Authorized {
    		let auth = self.check_auth(&req);

    		match auth {
    			Access::Denied => {
    				Authorized::No(Box::new(ContentHandler::error(
    					status::StatusCode::Unauthorized,
    					"Unauthorized",
    					"You need to provide valid credentials to access this page.",
    					None,
    					None,
    				)))
    			},
    			Access::AuthRequired => {
    				Authorized::No(Box::new(AuthRequiredHandler))
    			},
    			Access::Granted => {
    				Authorized::Yes
    			},
    		}
    	}
    }

    #[derive(Debug)]
    enum Access {
    	Granted,
    	Denied,
    	AuthRequired,
    }

    impl HttpBasicAuth {
    	/// Creates `HttpBasicAuth` instance with only one user.
    	pub fn single_user(username: &str, password: &str) -> Self {
    		let mut users = HashMap::new();
    		users.insert(username.to_owned(), password.to_owned());
    		HttpBasicAuth {
    			users: users
    		}
    	}

    	fn is_authorized(&self, username: &str, password: &str) -> bool {
    		self.users.get(&username.to_owned()).map_or(false, |pass| pass == password)
    	}

    	fn check_auth(&self, req: &server::Request<net::HttpStream>) -> Access {
    		match req.headers().get::<header::Authorization<header::Basic>>() {
    			Some(&header::Authorization(
    				header::Basic { ref username, password: Some(ref password) }
    			)) if self.is_authorized(username, password) => Access::Granted,
    			Some(_) => Access::Denied,
    			None => Access::AuthRequired,
    		}
    	}
    }

# Help

## Keyboard Shortcuts

?
  Show this help dialog
S
  Focus the search field
⇤
  Move up in search results
⇥
  Move down in search results
⏎
  Go to active search result
+
  Collapse/expand all sections

## Search Tricks

Prefix searches with a type followed by a colon (e.g. `fn:`) to restrict the search to a given type.

Accepted types are: `fn`, `mod`, `struct`, `enum`, `trait`, `type`, `macro`, and `const`.

Search functions by type signature (e.g. `vec -> usize` or `* -> vec`)