Mike Olund
8 years ago
5 changed files with 101 additions and 2 deletions
Split View
Diff Options
-
+44 -0edivorce/apps/core/middleware/basicauth_middleware.py
-
+30 -0edivorce/apps/core/templates/401.html
-
+3 -0edivorce/settings/base.py
-
+4 -1edivorce/settings/openshift.py
-
+20 -1openshift/templates/edivorce-environment-template.yaml
+ 44
- 0
edivorce/apps/core/middleware/basicauth_middleware.py
View File
| @ -0,0 +1,44 @@ | |||
| import base64 | |||
| from django.http import HttpResponse | |||
| from django.conf import settings | |||
| from django.template.loader import render_to_string | |||
| class BasicAuthMiddleware(object): | |||
| """ | |||
| Simple Basic Authentication module to password protect test environments | |||
| based on : https://djangosnippets.org/snippets/2468/ | |||
| This could have also been implemented via the NGINX-PROXY, but a Django | |||
| implementation allows environment variables to be used to store | |||
| username + password | |||
| """ | |||
| def process_request(self, request): | |||
| # allow all OpenShift health checks | |||
| if request.path == settings.FORCE_SCRIPT_NAME + 'health': | |||
| return None | |||
| # check if the middleware is enabled in settings | |||
| if not settings.BASICAUTH_ENABLED: | |||
| return None | |||
| if not 'HTTP_AUTHORIZATION' in request.META: | |||
| return self.__not_authorized() | |||
| else: | |||
| authentication = request.META['HTTP_AUTHORIZATION'] | |||
| (authmeth, auth) = authentication.split(' ', 1) | |||
| if 'basic' != authmeth.lower(): | |||
| return self.__not_authorized() | |||
| auth = base64.b64decode(auth.strip()).decode('utf-8') | |||
| username, password = auth.split(':', 1) | |||
| if username == settings.BASICAUTH_USERNAME and password == settings.BASICAUTH_PASSWORD: | |||
| return None | |||
| return self.__not_authorized() | |||
| def __not_authorized(self): | |||
| auth_template = render_to_string('401.html') | |||
| response = HttpResponse(auth_template, content_type="text/html") | |||
| response['WWW-Authenticate'] = 'Basic realm="Development"' | |||
| response.status_code = 401 | |||
| return response | |||
+ 30
- 0
edivorce/apps/core/templates/401.html
View File
| @ -0,0 +1,30 @@ | |||
| <!doctype html> | |||
| <html> | |||
| <head> | |||
| <title>Authentication Required</title> | |||
| <style type="text/css"> | |||
| body { | |||
| font-family: Sans-Serif; | |||
| padding: 1%; | |||
| color: #494949; | |||
| max-width: 980px; | |||
| } | |||
| h1 { | |||
| color: #042553; | |||
| } | |||
| </style> | |||
| </head> | |||
| <body> | |||
| <h1>This probably isn't the subdirectory you're looking for</h1> | |||
| <p> | |||
| This is our test server. It has been password protected to make sure nobody accidentally | |||
| uses it. Our test server is susceptible to untested bugs and periodic outages, and as a | |||
| bonus it will most likely lose all your saved data within a few days. | |||
| </p> | |||
| <p> | |||
| You were probably looking for | |||
| <strong><a href="https://justice.gov.bc.ca/divorce">https://justice.gov.bc.ca/divorce</a></strong>. | |||
| </p> | |||
| </body> | |||
| </html> | |||