622391b61d
Per IRC discussion with preaction, make HTTP auth failures soft failures. Don't attempt to re-auth the user on failure. Otherwise, .htaccess or similar put in place to protect a site and WebGUI get into a skirmish (users are asked to re-auth even if they did the .htaccess correctly, the log gets flooded, cats get radio shows, etc).
142 lines
5 KiB
Perl
142 lines
5 KiB
Perl
package WebGUI::URL::Content;
|
|
|
|
=head1 LEGAL
|
|
|
|
-------------------------------------------------------------------
|
|
WebGUI is Copyright 2001-2009 Plain Black Corporation.
|
|
-------------------------------------------------------------------
|
|
Please read the legal notices (docs/legal.txt) and the license
|
|
(docs/license.txt) that came with this distribution before using
|
|
this software.
|
|
-------------------------------------------------------------------
|
|
http://www.plainblack.com info@plainblack.com
|
|
-------------------------------------------------------------------
|
|
|
|
=cut
|
|
|
|
use strict;
|
|
use Apache2::Const -compile => qw(OK DECLINED);
|
|
use WebGUI::Affiliate;
|
|
use WebGUI::Exception;
|
|
use WebGUI::Pluggable;
|
|
use WebGUI::Session;
|
|
use WebGUI::Asset::Template;
|
|
|
|
=head1 NAME
|
|
|
|
Package WebGUI::URL::Content
|
|
|
|
=head1 DESCRIPTION
|
|
|
|
A URL handler that does whatever I tell it to do.
|
|
|
|
=head1 SYNOPSIS
|
|
|
|
use WebGUI::URL::Content;
|
|
my $status = WebGUI::URL::Content::handler($r, $s, $config);
|
|
|
|
=head1 SUBROUTINES
|
|
|
|
These subroutines are available from this package:
|
|
|
|
=cut
|
|
|
|
#-------------------------------------------------------------------
|
|
|
|
=head2 handler ( request, server, config )
|
|
|
|
The Apache request handler for this package.
|
|
|
|
This handler takes care of certain special tokens returns by a sub-handler.
|
|
|
|
=head3 chunked
|
|
|
|
This indicates that the handler has already returned the output to Apache. Commonly
|
|
used in Assets to get head tags back to the user to speed up the rendering process.
|
|
|
|
=head3 empty
|
|
|
|
This token indicates that the asset is legitimatally empty. Returns nothing
|
|
to the user, instead of displaying the Page Not Found page.
|
|
|
|
=cut
|
|
|
|
sub handler {
|
|
my ($request, $server, $config) = @_;
|
|
$request->push_handlers(PerlResponseHandler => sub {
|
|
|
|
my $request = shift;
|
|
$request = Apache2::Request->new($request);
|
|
|
|
my $session = $request->pnotes('wgSession');
|
|
|
|
WEBGUI_FATAL: {
|
|
unless (defined $session) {
|
|
$session = WebGUI::Session->open($server->dir_config('WebguiRoot'), $config->getFilename, $request, $server);
|
|
return Apache2::Const::OK if ! defined $session;
|
|
}
|
|
|
|
# if there's no session cookie but there is HTTP auth, try to log in using that
|
|
my $auth = $request->headers_in->{'Authorization'};
|
|
if( $session->user->isVisitor and $auth ) {
|
|
if( $auth =~ m/^Basic/ ) {
|
|
$auth =~ s/Basic //;
|
|
WebGUI::authen($request, split(":", MIME::Base64::decode_base64($auth), 2), $session);
|
|
}
|
|
else { # realm oriented
|
|
$request->push_handlers(PerlAuthenHandler => sub { return WebGUI::authen($request, undef, undef, $session)});
|
|
}
|
|
}
|
|
|
|
WebGUI::Asset::Template->processVariableHeaders($session);
|
|
foreach my $handler (@{$config->get("contentHandlers")}) {
|
|
my $output = eval { WebGUI::Pluggable::run($handler, "handler", [ $session ] )};
|
|
if ( my $e = WebGUI::Error->caught ) {
|
|
$session->errorHandler->error($e->package.":".$e->line." - ".$e->error);
|
|
$session->errorHandler->debug($e->package.":".$e->line." - ".$e->trace);
|
|
}
|
|
elsif ( $@ ) {
|
|
$session->errorHandler->error( $@ );
|
|
}
|
|
else {
|
|
if ($output eq "chunked") {
|
|
if ($session->errorHandler->canShowDebug()) {
|
|
$session->output->print($session->errorHandler->showDebug(),1);
|
|
}
|
|
last;
|
|
}
|
|
if ($output eq "empty") {
|
|
if ($session->errorHandler->canShowDebug()) {
|
|
$session->output->print($session->errorHandler->showDebug(),1);
|
|
}
|
|
last;
|
|
}
|
|
elsif (defined $output && $output ne "") {
|
|
$session->http->sendHeader;
|
|
$session->output->print($output);
|
|
if ($session->errorHandler->canShowDebug()) {
|
|
$session->output->print($session->errorHandler->showDebug(),1);
|
|
}
|
|
last;
|
|
}
|
|
# Keep processing for success codes
|
|
elsif ($session->http->getStatus < 200 || $session->http->getStatus > 299) {
|
|
$session->http->sendHeader;
|
|
last;
|
|
}
|
|
}
|
|
}
|
|
}
|
|
$session->output->print(
|
|
WebGUI::Asset::Template->getVariableJson($session), 1
|
|
);
|
|
$session->close if defined $session;
|
|
return Apache2::Const::OK;
|
|
});
|
|
$request->push_handlers(PerlMapToStorageHandler => sub { return Apache2::Const::OK });
|
|
$request->push_handlers(PerlTransHandler => sub { return Apache2::Const::OK });
|
|
return Apache2::Const::OK;
|
|
}
|
|
|
|
1;
|
|
|