Method Authenticate

net/http/authn/authn.go:50–80

Authenticate returns the request, with added tokens and/or localhost flags in the context, as appropriate.

(req *http.Request)

// Authenticate returns the request, with added tokens and/or localhost
// flags in the context, as appropriate.
func (a *API) Authenticate(req *http.Request) (*http.Request, error) {
	ctx := certAuthn(req, a.rootCAs)

	token, err := a.tokenAuthn(req)
	if err == nil && token != "" {
		// if this request was successfully authenticated with a token, pass the token along
		ctx = newContextWithToken(ctx, token)
	}

	local := a.localhostAuthn(req)
	if local {
		ctx = newContextWithLocalhost(ctx)
	}

	// Temporary workaround. Dashboard is always ok.
	// See loopbackOn comment above.
	if strings.HasPrefix(req.URL.Path, "/dashboard/") || req.URL.Path == "/dashboard" {
		return req.WithContext(ctx), nil
	}
	if loopbackOn && local {
		return req.WithContext(ctx), nil
	}

	// if there is no authentication at all, we return an "unauthenticated" error,
	// which may be helpful when debugging
	if len(X509Certs(ctx)) < 1 && err != nil {
		return req, errors.New("unauthenticated")
	}

	return req.WithContext(ctx), nil
}

// checks the request for a valid client cert list.
// If found, it is added to the request's context.