如何堆叠 Plack 身份验证处理程序？

发布于 10-11 08:18 字数 479 浏览 13 评论 0原文

我想让我的 Plack 应用程序尝试几种不同的方式来授权用户。具体来说，检查用户是否已通过会话 cookie 获得授权，然后检查摘要式身份验证，然后返回到基本身份验证。

我想我可以按照我希望检查的顺序启用一堆身份验证处理程序（会话、摘要、基本）。不幸的是， Plack::Middleware::Auth::Digest< 的方式/a> 和 Plack::Middleware::Auth::Basic 被写入，如果摘要或基本身份验证不存在，它们都会分别返回 401。

Plack 中通常如何处理这个问题？

原文

分享到QQ

分享到微博

如果你对这篇内容有疑问，欢迎到本站社区发帖提问参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。

发布评论

需要登录才能够评论，你可以免费注册一个本站的账号。

平安喜乐2024-10-18 08:18:15

我没有实施，但我想我有方法。您可以使用 Plack::Middleware::Conditional 来“内联”执行此操作。所以它看起来像这样，但您必须填写缺少的条件/测试。我没有看到简单/明显的方法，但我怀疑你可能会。由于您有 $env 来传递，您应该能够按照您想要的顺序设置/检查 HTTP_/session 内容，并保留下一个处理程序的状态以了解是否应该启用它。

use Plack::Builder;

my $app = sub {
    [ 200,
      [ "Content-Type" => "text/plain" ],
      [ "O HAI, PLAK!" ]
    ];
};

builder {
    enable "Session::Cookie";
    enable_if { my $env = shift;
                # I don't know...
            } "Auth::Digest",
                realm => "Secured", secret => "BlahBlah",
                    authenticator => sub { $_[0] eq $_[1] };
    enable_if { my $env = shift;
                # I don't know...
            } "Auth::Basic",
                authenticator => sub { $_[0] eq $_[1] };
    $app;
};

I do not have an implementation but I think I have the approach. You can do this "in-line" with Plack::Middleware::Conditional. So it would look like this but you'll have to fill in the missing conditions/tests. I didn't see an easy/obvious way but I suspect you might. Since you have the $env to pass around you should be able to set/check HTTP_/session stuff in the order you want and keep the state for the next handler to know if it should be enabled or not.

use Plack::Builder;

my $app = sub {
    [ 200,
      [ "Content-Type" => "text/plain" ],
      [ "O HAI, PLAK!" ]
    ];
};

builder {
    enable "Session::Cookie";
    enable_if { my $env = shift;
                # I don't know...
            } "Auth::Digest",
                realm => "Secured", secret => "BlahBlah",
                    authenticator => sub { $_[0] eq $_[1] };
    enable_if { my $env = shift;
                # I don't know...
            } "Auth::Basic",
                authenticator => sub { $_[0] eq $_[1] };
    $app;
};

回复收藏 0 原文