tests/httpserverauth.py
author Matt Harbison <matt_harbison@yahoo.com>
Tue, 05 Feb 2019 09:37:23 -0500
changeset 41585 549af2fa089f
child 41587 ccaa52865fac
permissions -rw-r--r--
tests: extract the http server authentication extension to a single module We had 4 copy/pastes of this, and no coverage for http digests (which are currently broken on py3).

from __future__ import absolute_import

import base64

from mercurial.hgweb import common

def perform_authentication(hgweb, req, op):
    auth = req.headers.get(b'Authorization')
    if not auth:
        raise common.ErrorResponse(common.HTTP_UNAUTHORIZED, b'who',
                [(b'WWW-Authenticate', b'Basic Realm="mercurial"')])

    if base64.b64decode(auth.split()[1]).split(b':', 1) != [b'user', b'pass']:
        raise common.ErrorResponse(common.HTTP_FORBIDDEN, b'no')

def extsetup(ui):
    common.permhooks.insert(0, perform_authentication)