Method AllowedAccess

pkg/auth/auth.go:244–268

(req *http.Request)

}

func (up *UserPass) AllowedAccess(req *http.Request) Operation {
	user, pass, err := httputil.BasicAuth(req)
	if err == nil {
		if subtle.ConstantTimeCompare([]byte(user), []byte(up.Username)) == 1 {
			if subtle.ConstantTimeCompare([]byte(pass), []byte(up.Password)) == 1 {
				return OpAll
			}
			if up.VivifyPass != nil && subtle.ConstantTimeCompare([]byte(pass), []byte(*up.VivifyPass)) == 1 {
				return OpVivify
			}
		}
	}

	if authTokenHeaderMatches(req) {
		return OpAll
	}
	if websocketTokenMatches(req) {
		return OpAll
	}
	if up.OrLocalhost && httputil.IsLocalhost(req) {
		return OpAll
	}

	return 0
}

func (up *UserPass) AddAuthHeader(req *http.Request) {
	req.SetBasicAuth(up.Username, up.Password)