Method generatePage

plugins/plugin_utils/plugin_HTTP.cpp:399–492

}

bool BZFSHTTPAuth::generatePage(const HTTPRequest& request, HTTPReply& reply) {
  if (!authPage.size()) {
    setupAuth();
  }

  flushTasks();
  int sessionID = request.sessionID;
  reply.docType = HTTPReply::eHTML;
  reply.returnCode = HTTPReply::e200OK;

  std::map<int, AuthInfo>::iterator authItr = authedSessions.find(sessionID);
  if (authItr != authedSessions.end()) {  // it is one of our authorized users, be nice and forward the request to our child
    // put this back to the default
    reply.docType = HTTPReply::eText;

    authItr->second.time = bz_getCurrentTime();
    bool complete = handleAuthedRequest(authItr->second.level, request, reply);

    if (!complete) {
      defferedAuthedRequests.push_back(request.requestID);
    }

    return complete;
  }
  else { // they are not fully authorized yet
    std::map<int, PendingTokenTask*>::iterator pendingItr = pendingTokenTasks.find(request.requestID);
    if (pendingItr != pendingTokenTasks.end()) { // they have a token, check it
      AuthInfo info;
      info.time = bz_getCurrentTime();

      if (!pendingItr->second->groups.size()) {
        info.level = -1;
      }
      else {
        if (pendingItr->second->groups.size() == 1) {
          info.username = pendingItr->second->groups[0];
          info.level = 0; // just authed, no levels
        }
        else {
          info.username = pendingItr->second->groups[0];
          info.level = getLevelFromGroups(pendingItr->second->groups);
          info.groups = pendingItr->second->groups;
          info.groups.erase(info.groups.begin()); // pull off the first 'group' because it's a name
        }
        if (info.level >= 0) {
          authedSessions[request.sessionID] = info;
        }
      }

      delete(pendingItr->second);
      pendingTokenTasks.erase(pendingItr);

      // put this back to the default
      reply.docType = HTTPReply::eText;

      bool complete = handleAuthedRequest(info.level, request, reply);

      if (!complete) {