Contents

require 'omniauth'
require 'net/http'

module OmniAuth
  module Strategies
    class HttpBasic
      include OmniAuth::Strategy

      args [:endpoint]

      option :title,   "Http Basic"
      option :headers, {}

      def request_phase
        OmniAuth::Form.build(:title => options.title, :url => callback_path) do
          text_field 'Username', 'username'
          password_field 'Password', 'password'
        end.to_response
      end

      def callback_phase
        return fail!(:invalid_credentials) if !authentication_response
        return fail!(:invalid_credentials) if authentication_response.code.to_i >= 400
        super
      end

      protected

        # by default we use static uri. If dynamic uri is required, override
        # this method.
        def api_uri
          options.endpoint
        end

        def username
          request['username']
        end

        def password
          request['password']
        end

        def authentication_response
          unless @authentication_response
            return unless username && password

            uri = URI(api_uri)
            http = Net::HTTP.new(uri.host, uri.port)
            if uri.scheme == 'https'
              http.use_ssl = true
              http.verify_mode = OpenSSL::SSL::VERIFY_NONE
            end

            req = Net::HTTP::Get.new(uri.request_uri)
            req.basic_auth username, password
            @authentication_response = http.request(req)
          end

          @authentication_response
        end

    end
  end
end

Version data entries

2 entries across 2 versions & 1 rubygems

Version	Path
omniauth-http-basic-1.1.0	lib/omniauth/strategies/http_basic.rb
omniauth-http-basic-1.0.0	lib/omniauth/strategies/http_basic.rb