Ñò
ô†³Kc @ sö d Z d d k l Z d d k Ty d d k l Z Wn# e j
o d d k l Z n Xd d k Z d d k Z d „ Z d e
f d „ ƒ YZ d e
f d
„ ƒ YZ e Z
d d g Z d „ Z d
e j o# d d k Z e i d e i ƒ n d S( s
Digest HTTP/1.1 Authentication
This module implements ``Digest`` authentication as described by
RFC 2617 [1]_ .
Basically, you just put this module before your application, and it
takes care of requesting and handling authentication requests. This
module has been tested with several common browsers "out-in-the-wild".
>>> from paste.wsgilib import dump_environ
>>> from paste.httpserver import serve
>>> # from paste.auth.digest import digest_password, AuthDigestHandler
>>> realm = 'Test Realm'
>>> def authfunc(environ, realm, username):
... return digest_password(realm, username, username)
>>> serve(AuthDigestHandler(dump_environ, realm, authfunc))
serving on...
This code has not been audited by a security expert, please use with
caution (or better yet, report security holes). At this time, this
implementation does not provide for further challenges, nor does it
support Authentication-Info header. It also uses md5, and an option
to use sha would be a good thing.
.. [1] http://www.faqs.org/rfcs/rfc2617.html
iÿÿÿÿ( t HTTPUnauthorized( t *( t md5Nc C s t d | | | f ƒ i ƒ S( s; construct the appropriate hashcode needed for HTTP digest s %s:%s:%s( R t hexdigest( t realmt usernamet password( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyt digest_password( s t AuthDigestAuthenticatorc B s; e Z d Z d „ Z d d „ Z d „ Z d „ Z e Z RS( s9 implementation of RFC 2617 - HTTP Digest Authentication c C s h | _ | | _ | | _ d S( N( t noncet authfuncR ( t selfR R
( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyt __init__. s t c C s÷ t d t i ƒ t i ƒ f ƒ i ƒ } t d t i ƒ t i ƒ f ƒ i ƒ } d | i | hashcode
This module provides a 'digest_password' helper function
which can help construct the hashcode; it is recommended
that the hashcode is stored in a database, not the user's
actual password (since you only need the hashcode).
c C s t | | ƒ | _ | | _ d S( N( R RA t application( R RG R R
( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyR ® s c C sz t | ƒ } | pW | i | ƒ } t | t ƒ o$ t i | d ƒ t i | | ƒ qj | i | | ƒ Sn | i | | ƒ S( NR- ( t REMOTE_USERRA t
isinstancet strt AUTH_TYPEt updatet wsgi_applicationRG ( R R9 t start_responseR t result( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyRE ² s ( RB RC RD R RE ( ( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyRF ~ s / R c K s8 d d k l } d d k } | | ƒ } t | | | ƒ S( sÔ
Grant access via digest authentication
Config looks like this::
[filter:grant]
use = egg:Paste#auth_digest
realm=myrealm
authfunc=somepackage.somemodule:somefunction
iÿÿÿÿ( t eval_importN( t paste.util.import_stringRP t typesRF ( t appt global_confR R
t kwRP RR ( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyt make_digestÁ s t __main__t optionflags( RD t paste.httpexceptionsR t paste.httpheaderst hashlibR t ImportErrorR R R t objectR RF t
middlewaret __all__RV RB t doctestt testmodt ELLIPSIS( ( ( s5 /usr/lib/python2.6/site-packages/paste/auth/digest.pyt s
R?