blob: d1972fadf1769822bfb62ea89703233a196613bd (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
|
#include <unordered_map>
#include <boost/algorithm/string/predicate.hpp>
#include <token_authorization_middleware.hpp>
namespace crow
{
std::string TokenAuthorizationMiddleware::context::get_cookie(const std::string& key)
{
if (cookie_sessions.count(key))
return cookie_sessions[key];
return {};
}
void TokenAuthorizationMiddleware::context::set_cookie(const std::string& key, const std::string& value)
{
cookies_to_push_to_client.emplace(key, value);
}
void TokenAuthorizationMiddleware::before_handle(crow::request& req, response& res, context& ctx)
{
auto return_unauthorized = [&req, &res](){
res.code = 401;
res.end();
};
if (req.url == "/login"){
}
// Check for an authorization header, reject if not present
if (req.headers.count("Authorization") != 1) {
return_unauthorized();
return;
}
std::string auth_header = req.get_header_value("Authorization");
// If the user is attempting any kind of auth other than token, reject
if (!boost::starts_with(auth_header, "Token ")) {
return_unauthorized();
return;
}
}
void TokenAuthorizationMiddleware::after_handle(request& /*req*/, response& res, context& ctx)
{
for (auto& cookie : ctx.cookies_to_push_to_client) {
res.add_header("Set-Cookie", cookie.first + "=" + cookie.second);
}
}
}
|
