Method checkBasicAuth

proxy/serverhttps.go:257–279

checkBasicAuth checks the basic authorization data, if necessary, and if the data isn't valid, it writes an error. shouldHandle is false if the request has been denied. p.HTTPConfig must not be nil.

(
	w http.ResponseWriter,
	r *http.Request,
	raddr netip.AddrPort,
)

// data isn't valid, it writes an error.  shouldHandle is false if the request
// has been denied.  p.HTTPConfig must not be nil.
func (p *Proxy) checkBasicAuth(
	w http.ResponseWriter,
	r *http.Request,
	raddr netip.AddrPort,
) (shouldHandle bool) {
	ui := p.HTTPConfig.Userinfo
	if ui == nil {
		return true
	}

	user, pass, _ := r.BasicAuth()
	if matchesUserinfo(ui, user, pass) {
		return true
	}

	p.logger.Error("basic auth failed", "user", user, "raddr", raddr)

	h := w.Header()
	h.Set(httphdr.WWWAuthenticate, `Basic realm="DNS", charset="UTF-8"`)
	http.Error(w, "Authorization required", http.StatusUnauthorized)

	return false
}

// matchesUserinfo returns false if user and pass don't match userinfo.
// userinfo must not be nil.