blob: 50b5c801d615e73eafb27fd92ba993270478697c (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
|
def main(request, response):
session_user = request.auth.username
session_pass = request.auth.password
expected_user_name = request.headers.get(b"X-User", None)
token = expected_user_name
if session_user is None and session_pass is None:
if token is not None and request.server.stash.take(token) is not None:
return b'FAIL (did not authorize)'
else:
if token is not None:
request.server.stash.put(token, b"1")
status = (401, b'Unauthorized')
headers = [(b'WWW-Authenticate', b'Basic realm="test"')]
return status, headers, b'FAIL (should be transparent)'
else:
if request.server.stash.take(token) == b"1":
challenge = b"DID"
else:
challenge = b"DID-NOT"
headers = [(b'XHR-USER', expected_user_name),
(b'SES-USER', session_user),
(b"X-challenge", challenge)]
return headers, session_user + b"\n" + session_pass
|
