71 lines
1.7 KiB
Go
71 lines
1.7 KiB
Go
package auth
|
|
|
|
import (
|
|
"crypto/rand"
|
|
"errors"
|
|
"net/http"
|
|
|
|
fbErrors "github.com/filebrowser/filebrowser/v2/errors"
|
|
"github.com/filebrowser/filebrowser/v2/settings"
|
|
"github.com/filebrowser/filebrowser/v2/users"
|
|
)
|
|
|
|
// MethodProxyAuth is used to identify no auth.
|
|
const MethodProxyAuth settings.AuthMethod = "proxy"
|
|
|
|
// ProxyAuth is a proxy implementation of an auther.
|
|
type ProxyAuth struct {
|
|
Header string `json:"header"`
|
|
}
|
|
|
|
// Auth authenticates the user via an HTTP header.
|
|
func (a ProxyAuth) Auth(r *http.Request, usr users.Store, setting *settings.Settings, srv *settings.Server) (*users.User, error) {
|
|
username := r.Header.Get(a.Header)
|
|
user, err := usr.Get(srv.Root, username)
|
|
if errors.Is(err, fbErrors.ErrNotExist) {
|
|
return a.createUser(usr, setting, srv, username)
|
|
}
|
|
return user, err
|
|
}
|
|
|
|
func (a ProxyAuth) createUser(usr users.Store, setting *settings.Settings, srv *settings.Server, username string) (*users.User, error) {
|
|
const passwordSize = 32
|
|
randomPasswordBytes := make([]byte, passwordSize)
|
|
_, err := rand.Read(randomPasswordBytes)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
var hashedRandomPassword string
|
|
hashedRandomPassword, err = users.HashPwd(string(randomPasswordBytes))
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
user := &users.User{
|
|
Username: username,
|
|
Password: hashedRandomPassword,
|
|
LockPassword: true,
|
|
}
|
|
setting.Defaults.Apply(user)
|
|
|
|
var userHome string
|
|
userHome, err = setting.MakeUserDir(user.Username, user.Scope, srv.Root)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
user.Scope = userHome
|
|
|
|
err = usr.Save(user)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
|
|
return user, nil
|
|
}
|
|
|
|
// LoginPage tells that proxy auth doesn't require a login page.
|
|
func (a ProxyAuth) LoginPage() bool {
|
|
return false
|
|
}
|