60 lines
1.2 KiB
Go
60 lines
1.2 KiB
Go
package main
|
|
|
|
import (
|
|
"crypto/sha1"
|
|
"encoding/base64"
|
|
"encoding/csv"
|
|
"io"
|
|
"log"
|
|
"os"
|
|
)
|
|
|
|
// lookup passwords in a htpasswd file
|
|
// The entries must have been created with -s for SHA encryption
|
|
|
|
type HtpasswdFile struct {
|
|
Users map[string]string
|
|
}
|
|
|
|
func NewHtpasswdFromFile(path string) (*HtpasswdFile, error) {
|
|
r, err := os.Open(path)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
return NewHtpasswd(r)
|
|
}
|
|
|
|
func NewHtpasswd(file io.Reader) (*HtpasswdFile, error) {
|
|
csv_reader := csv.NewReader(file)
|
|
csv_reader.Comma = ':'
|
|
csv_reader.Comment = '#'
|
|
csv_reader.TrimLeadingSpace = true
|
|
|
|
records, err := csv_reader.ReadAll()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
h := &HtpasswdFile{Users: make(map[string]string)}
|
|
for _, record := range records {
|
|
h.Users[record[0]] = record[1]
|
|
}
|
|
return h, nil
|
|
}
|
|
|
|
func (h *HtpasswdFile) Validate(user string, password string) bool {
|
|
realPassword, exists := h.Users[user]
|
|
if !exists {
|
|
return false
|
|
}
|
|
if realPassword[:5] == "{SHA}" {
|
|
d := sha1.New()
|
|
d.Write([]byte(password))
|
|
if realPassword[5:] == base64.StdEncoding.EncodeToString(d.Sum(nil)) {
|
|
return true
|
|
}
|
|
} else {
|
|
log.Printf("Invalid htpasswd entry for %s. Must be a SHA entry.", user)
|
|
}
|
|
return false
|
|
}
|