authorisation merged from micha

1 files changed, 24 insertions, 0 deletions

diff --git a/lib/authorization.rb b/lib/authorization.rb
new file mode 100644
index 0000000..7cb548e
--- /dev/null
+++ b/lib/authorization.rb
@@ -0,0 +1,24 @@
+helpers do
+ 
+  def protected!
+    response['WWW-Authenticate'] = %(Basic realm="Opentox Webservice Authentication") and \
+    throw(:halt, [401, "Not authorized\n"]) and \
+    return unless authorized?
+  end
+ 
+  def authorized?
+    @auth ||= Rack::Auth::Basic::Request.new(request.env)
+    @auth.provided? && @auth.basic? && @auth.credentials && valid_user?
+  end
+  
+  def valid_user?
+    users = @@users[:users]
+    return @auth.credentials == [@auth.username, users.fetch(@auth.username)] if users.has_key?(@auth.username)
+    return false
+  end
+ 
+end
+ 
+before do
+  protected! unless env['REQUEST_METHOD'] == "GET"
+end
\ No newline at end of file