http-server 0.8.9

Simple and configurable command-line HTTP server
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50

use http::{Request, StatusCode};
use http_auth_basic::Credentials;
use hyper::Body;
use std::sync::Arc;
use tokio::sync::Mutex;

use crate::config::basic_auth::BasicAuthConfig;
use crate::utils::error::make_http_error_response;

use super::MiddlewareBefore;

pub fn make_basic_auth_middleware(basic_auth_config: BasicAuthConfig) -> MiddlewareBefore {
    let credentials = Arc::new(Credentials::new(
        basic_auth_config.username.as_str(),
        basic_auth_config.password.as_str(),
    ));

    Box::new(move |request: Arc<Mutex<Request<Body>>>| {
        let credentials = Arc::clone(&credentials);

        Box::pin(async move {
            let request = request.lock().await;

            if let Some(auth_header_value) = request.headers().get(http::header::AUTHORIZATION) {
                let auth_header_value = auth_header_value.to_str().map_err(|err| {
                    make_http_error_response(StatusCode::BAD_REQUEST, err.to_string().as_str())
                })?;

                let incoming_credentials = Credentials::from_header(auth_header_value.to_string())
                    .map_err(|err| {
                        make_http_error_response(StatusCode::BAD_REQUEST, err.to_string().as_str())
                    })?;

                if incoming_credentials == *credentials {
                    return Ok(());
                }

                return Err(make_http_error_response(
                    StatusCode::UNAUTHORIZED,
                    "Unauthorized",
                ));
            }

            Err(make_http_error_response(
                StatusCode::UNAUTHORIZED,
                "Unauthorized",
            ))
        })
    })
}