http_authenticator.h

Go to the documentation of this file.

#ifndef SENSESP_SRC_SENSESP_NET_HTTP_AUTHENTICATOR_H_
#define SENSESP_SRC_SENSESP_NET_HTTP_AUTHENTICATOR_H_
 
#include "sensesp.h"
 
#include <esp_http_server.h>
#include <list>
#include <mbedtls/base64.h>
 
#include "sensesp/system/hash.h"
 
namespace sensesp {
 
String get_random_hex_string();

class HTTPAuthenticator {
 public:
  HTTPAuthenticator() {}
  virtual bool authenticate_request(httpd_req_t* req) = 0;
};
 
struct NonceData {
  String nonce;
  int count;
};

class HTTPDigestAuthenticator : public HTTPAuthenticator {
 public:
  HTTPDigestAuthenticator(String username, String password, String realm,
                          unsigned long nonce_max_age = 900000)
      : HTTPAuthenticator(),
        username_(username),
        realm_(realm),
        nonce_max_age_(nonce_max_age) {
    ha1_ = MD5(username + ":" + realm + ":" + password);
    secret_ = get_random_hex_string();
  }

  struct PrecomputedHA1 {};
  HTTPDigestAuthenticator(PrecomputedHA1, String username, String ha1,
                          String realm,
                          unsigned long nonce_max_age = 900000)
      : HTTPAuthenticator(),
        username_(username),
        ha1_(ha1),
        realm_(realm),
        nonce_max_age_(nonce_max_age) {
    secret_ = get_random_hex_string();
  }
 
  virtual bool authenticate_request(httpd_req_t* req) override;
 
  int authenticate_digest(httpd_req_t* req);
 
 protected:
  esp_err_t request_authentication(httpd_req_t* req, bool stale = false);
 
  String username_;
  String ha1_;  
  String realm_;
  unsigned long nonce_max_age_;
  String secret_;  
  std::list<NonceData> nonces_;
 
  String create_nonce();

  int find_nonce(String nonce, int count);
 
  String extract_param(String param, String auth_str, bool quoted = true);
};
 
}  // namespace sensesp
 
#endif  // SENSESP_SRC_SENSESP_NET_HTTP_AUTHENTICATOR_H_