Function getBearerAuthParam

src/uri/fetchers/docker.cpp:485–516

Validates that the response contains WWW-Authenticate header with a scheme BEARER and, if so, extracts parameters from the header. Otherwise, returns Error.

// a scheme BEARER and, if so, extracts parameters from the header.
// Otherwise, returns Error.
static Try<hashmap<string, string>> getBearerAuthParam(
    const URI& uri,
    const http::Response& response)
{
  Result<http::header::WWWAuthenticate> header =
    response.headers.get<http::header::WWWAuthenticate>();

  if (header.isError()) {
    return Error(
        "Failed to get WWW-Authenticate header from " + stringify(uri) +
        ": " + header.error());
  } else if (header.isNone()) {
    return Error(
        "Got unexpected empty WWW-Authenticate header from " + stringify(uri));
  }

  // According to RFC, auth scheme should be case insensitive.
  const string authScheme = strings::upper(header->authScheme());
  if (authScheme == "BASIC"){
    return Error(
        "Got unexpected BASIC Authorization response status: " +
        response.status + " from " + stringify(uri));
  }

  if (authScheme != "BEARER") {
    return Error(
        "Got unsupported auth-scheme: " + authScheme +
        " from " + stringify(uri));
  }

  return header->authParam();
}


//-------------------------------------------------------------------