Crawler backend

sitescripts/web.py

Index: sitescripts/web.py
===================================================================
--- a/sitescripts/web.py
+++ b/sitescripts/web.py
@@ -4,7 +4,11 @@
 # version 2.0 (the "License"). You can obtain a copy of the License at
 # http://mozilla.org/MPL/2.0/.
 
+import base64
+from sitescripts.utils import get_config
+
 handlers = {}
+authenticated_users = {}
 
 def url_handler(url):
   def decorator(func):
@@ -17,6 +21,25 @@
     raise Exception('A handler for url %s is already registered' % url)
   handlers[url] = func
 
+def basic_auth(f):
+  return lambda environ, start_response: authenticate(f, environ, start_response)
+
+def authenticate(f, environ, start_response):
+  if "HTTP_AUTHORIZATION" in environ:
+    auth = environ["HTTP_AUTHORIZATION"].split()
+    if len(auth) == 2:
+      if auth[0].lower() == "basic":
+        username, password = base64.b64decode(auth[1]).split(":")
+        expected_username = get_config().get("DEFAULT", "basic_auth_username")

[Wladimir Palant, 2012/09/14 17:24:18]

I don't think that these settings belong into the DEFAULT section, what if we
decide to use different credentials for different scripts? How about passing the
config section to basic_auth()?

[Felix Dahlke, 2012/09/26 15:20:30]

Done.

+        expected_password = get_config().get("DEFAULT", "basic_auth_password")
+        if username == expected_username and password == expected_password:
+          return f(environ, start_response)
+
+  realm = get_config().get("DEFAULT", "basic_auth_realm")
+  start_response("401 UNAUTHORIZED",
+                 [("WWW-Authenticate", 'Basic realm="%s"' % realm)])
+  return ""
+
 import openid.web.server
 import subscriptions.web.fallback
 import reports.web.submitReport