mirror of
https://git.haproxy.org/git/haproxy.git/
synced 2025-10-31 00:21:00 +01:00
ff011f26e9
And also rename "req_acl_rule" "http_req_rule". At the beginning that was a bit confusing to me, especially the "req_acl" list which in fact holds what we call rules. After some digging, it appeared that some part of the code is 100% HTTP and not just related to authentication anymore, so let's move that part to HTTP and keep the auth-only code in auth.c.
96 lines
3.4 KiB
C
96 lines
3.4 KiB
C
/*
|
|
* URI-based user authentication using the HTTP basic method.
|
|
*
|
|
* Copyright 2006-2011 Willy Tarreau <w@1wt.eu>
|
|
*
|
|
* This program is free software; you can redistribute it and/or
|
|
* modify it under the terms of the GNU General Public License
|
|
* as published by the Free Software Foundation; either version
|
|
* 2 of the License, or (at your option) any later version.
|
|
*
|
|
*/
|
|
|
|
#ifndef _COMMON_URI_AUTH_H
|
|
#define _COMMON_URI_AUTH_H
|
|
|
|
#include <common/config.h>
|
|
|
|
#include <types/auth.h>
|
|
|
|
/* This is a list of proxies we are allowed to see. Later, it should go in the
|
|
* user list, but before this we need to support de/re-authentication.
|
|
*/
|
|
struct stat_scope {
|
|
struct stat_scope *next; /* next entry, NULL if none */
|
|
int px_len; /* proxy name length */
|
|
char *px_id; /* proxy id */
|
|
};
|
|
|
|
#define ST_HIDEVER 0x00000001 /* do not report the version and reldate */
|
|
#define ST_SHNODE 0x00000002 /* show node name */
|
|
#define ST_SHDESC 0x00000004 /* show description */
|
|
#define ST_SHLGNDS 0x00000008 /* show legends */
|
|
#define ST_CONVDONE 0x00000010 /* req_acl conversion done */
|
|
|
|
/* later we may link them to support multiple URI matching */
|
|
struct uri_auth {
|
|
int uri_len; /* the prefix length */
|
|
char *uri_prefix; /* the prefix we want to match */
|
|
char *auth_realm; /* the realm reported to the client */
|
|
char *node, *desc; /* node name & description reported in this stats */
|
|
int refresh; /* refresh interval for the browser (in seconds) */
|
|
int flags; /* some flags describing the statistics page */
|
|
struct stat_scope *scope; /* linked list of authorized proxies */
|
|
struct userlist *userlist; /* private userlist to emulate legacy "stats auth user:password" */
|
|
struct list http_req_rules; /* stats http-request rules : allow/deny/auth */
|
|
struct list admin_rules; /* 'stats admin' rules (chained) */
|
|
struct uri_auth *next; /* Used at deinit() to build a list of unique elements */
|
|
};
|
|
|
|
/* This is the default statistics URI */
|
|
#ifdef CONFIG_STATS_DEFAULT_URI
|
|
#define STATS_DEFAULT_URI CONFIG_STATS_DEFAULT_URI
|
|
#else
|
|
#define STATS_DEFAULT_URI "/haproxy?stats"
|
|
#endif
|
|
|
|
/* This is the default statistics realm */
|
|
#ifdef CONFIG_STATS_DEFAULT_REALM
|
|
#define STATS_DEFAULT_REALM CONFIG_STATS_DEFAULT_REALM
|
|
#else
|
|
#define STATS_DEFAULT_REALM "HAProxy Statistics"
|
|
#endif
|
|
|
|
|
|
struct stats_admin_rule {
|
|
struct list list; /* list linked to from the proxy */
|
|
struct acl_cond *cond; /* acl condition to meet */
|
|
};
|
|
|
|
|
|
/* Various functions used to set the fields during the configuration parsing.
|
|
* Please that all those function can initialize the root entry in order not to
|
|
* force the user to respect a certain order in the configuration file.
|
|
*
|
|
* Default values are used during initialization. Check STATS_DEFAULT_* for
|
|
* more information.
|
|
*/
|
|
struct uri_auth *stats_check_init_uri_auth(struct uri_auth **root);
|
|
struct uri_auth *stats_set_uri(struct uri_auth **root, char *uri);
|
|
struct uri_auth *stats_set_realm(struct uri_auth **root, char *realm);
|
|
struct uri_auth *stats_set_refresh(struct uri_auth **root, int interval);
|
|
struct uri_auth *stats_set_flag(struct uri_auth **root, int flag);
|
|
struct uri_auth *stats_add_auth(struct uri_auth **root, char *user);
|
|
struct uri_auth *stats_add_scope(struct uri_auth **root, char *scope);
|
|
struct uri_auth *stats_set_node(struct uri_auth **root, char *name);
|
|
struct uri_auth *stats_set_desc(struct uri_auth **root, char *desc);
|
|
|
|
#endif /* _COMMON_URI_AUTH_H */
|
|
|
|
/*
|
|
* Local variables:
|
|
* c-indent-level: 8
|
|
* c-basic-offset: 8
|
|
* End:
|
|
*/
|