summaryrefslogtreecommitdiff
path: root/Auth/Proxied.hs
blob: 32b2b782219c1c44adefa63626441179661e6768 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
{-# LANGUAGE QuasiQuotes #-}
{-# LANGUAGE OverloadedStrings #-}

module Auth.Proxied
    ( authProxied
    ) where

import Yesod.Auth
import Yesod.Core (lift)
import Yesod.Core.Handler (notFound, waiRequest)
import Text.Hamlet (hamlet)
import Yesod.Core.Widget (toWidget)

import Data.List (lookup)
import Data.Maybe (fromMaybe)
import Network.Wai (Request(requestHeaders))
import Prelude (($), (.), Bool(..), fmap, either, const, Maybe(..), (/=), (=<<), return, show)
import qualified Data.ByteString as B
import qualified Data.ByteString.Base64 as Base64
import Data.CaseInsensitive (mk)
import Data.Text.Encoding (decodeUtf8)


authProxied :: YesodAuth m => AuthPlugin m
authProxied =
    AuthPlugin "proxied" dispatch login
  where
    dispatch _ [] = do
        mfu <- fmap ((fmap (decodeUtf8 . B.takeWhile (58 /=)) . either (const Nothing) return . Base64.decode . B.drop 1 . B.dropWhile (32 /=) =<<) . lookup (mk "Authorization") . requestHeaders) waiRequest
        lift $ setCredsRedirect $ Creds "proxied" (fromMaybe "" mfu) []
    dispatch _ _ = notFound
    login authToMaster =
        let url = authToMaster (PluginR "proxied" []) in
        toWidget [hamlet|
    Your are now authenticated for #
    <a href="@{url}">here
|]