68 lines
1.7 KiB
PHP
68 lines
1.7 KiB
PHP
<?php
|
|
|
|
namespace Sabre\HTTP;
|
|
|
|
/**
|
|
* HTTP Basic Authentication handler
|
|
*
|
|
* Use this class for easy http authentication setup
|
|
*
|
|
* @copyright Copyright (C) 2007-2015 fruux GmbH (https://fruux.com/).
|
|
* @author Evert Pot (http://evertpot.com/)
|
|
* @license http://sabre.io/license/ Modified BSD License
|
|
*/
|
|
class BasicAuth extends AbstractAuth {
|
|
|
|
/**
|
|
* Returns the supplied username and password.
|
|
*
|
|
* The returned array has two values:
|
|
* * 0 - username
|
|
* * 1 - password
|
|
*
|
|
* If nothing was supplied, 'false' will be returned
|
|
*
|
|
* @return mixed
|
|
*/
|
|
public function getUserPass() {
|
|
|
|
// Apache and mod_php
|
|
if (($user = $this->httpRequest->getRawServerValue('PHP_AUTH_USER'))!==null && ($pass = $this->httpRequest->getRawServerValue('PHP_AUTH_PW'))!==null) {
|
|
|
|
return array($user,$pass);
|
|
|
|
}
|
|
|
|
// Most other webservers
|
|
$auth = $this->httpRequest->getHeader('Authorization');
|
|
|
|
// Apache could prefix environment variables with REDIRECT_ when urls
|
|
// are passed through mod_rewrite
|
|
if (!$auth) {
|
|
$auth = $this->httpRequest->getRawServerValue('REDIRECT_HTTP_AUTHORIZATION');
|
|
}
|
|
|
|
if (!$auth) return false;
|
|
|
|
if (strpos(strtolower($auth),'basic')!==0) return false;
|
|
|
|
return explode(':', base64_decode(substr($auth, 6)),2);
|
|
|
|
}
|
|
|
|
/**
|
|
* Returns an HTTP 401 header, forcing login
|
|
*
|
|
* This should be called when username and password are incorrect, or not supplied at all
|
|
*
|
|
* @return void
|
|
*/
|
|
public function requireLogin() {
|
|
|
|
$this->httpResponse->setHeader('WWW-Authenticate','Basic realm="' . $this->realm . '"');
|
|
$this->httpResponse->sendStatus(401);
|
|
|
|
}
|
|
|
|
}
|