mirror of
https://github.com/octoleo/restic.git
synced 2024-06-05 10:30:49 +00:00
b108966b12
* Patch for https://github.com/restic/restic/issues/567 Backup also files on windows with longer pathnames than 255 chars (e.g. from node). as fd0 says "So, as far as I can see, we need to have custom methods for all functions that accept a path, so that on Windows we can substitute the normal (possibly relative) path used within restic by an (absolute) UNC path, and only then call the underlying functions like os.Stat(), os.Lstat(), os.Open() and so on. I've already thought about adding a generic abstraction for the file system (so we can mock this easier in tests), and this looks like a good opportunity to build it." * fixed building tests * Restructured patches Add Wrapper for filepath.Walk * using \\?\ requires absolute pathes to be used. Now all tests run * used gofmt on the code * Restructured Code. No patches dir, integrate the file functions into restic/fs/ There is still an issue, because restic.fs.Open has a different api the os.Open, which returns the result of OpenFile, but takes only a string * Changed the last os.Open() calls to fs.Open() after extending the File interface * fixed name-clash of restic.fs and fuse.fs detected by travis * fixed fmt with gofmt * c&p failure: removed fixpath() call. * missing include * fixed includes in linux variant * Fix for Linux. Fd() is required on File interface * done gofmt
98 lines
2.8 KiB
Go
98 lines
2.8 KiB
Go
// +build go1.4
|
|
|
|
package main
|
|
|
|
/*
|
|
Copied from: github.com/bitly/oauth2_proxy
|
|
|
|
MIT License
|
|
|
|
Permission is hereby granted, free of charge, to any person obtaining a copy
|
|
of this software and associated documentation files (the "Software"), to deal
|
|
in the Software without restriction, including without limitation the rights
|
|
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
|
copies of the Software, and to permit persons to whom the Software is
|
|
furnished to do so, subject to the following conditions:
|
|
|
|
The above copyright notice and this permission notice shall be included in
|
|
all copies or substantial portions of the Software.
|
|
|
|
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
|
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
|
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
|
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
|
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
|
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN
|
|
THE SOFTWARE.
|
|
*/
|
|
|
|
import (
|
|
"crypto/sha1"
|
|
"encoding/base64"
|
|
"encoding/csv"
|
|
"io"
|
|
"log"
|
|
|
|
"restic/fs"
|
|
)
|
|
|
|
// lookup passwords in a htpasswd file
|
|
// The entries must have been created with -s for SHA encryption
|
|
|
|
// HtpasswdFile is a map for usernames to passwords.
|
|
type HtpasswdFile struct {
|
|
Users map[string]string
|
|
}
|
|
|
|
// NewHtpasswdFromFile reads the users and passwords from a htpasswd
|
|
// file and returns them. If an error is encountered, it is returned, together
|
|
// with a nil-Pointer for the HtpasswdFile.
|
|
func NewHtpasswdFromFile(path string) (*HtpasswdFile, error) {
|
|
r, err := fs.Open(path)
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
defer r.Close()
|
|
return NewHtpasswd(r)
|
|
}
|
|
|
|
// NewHtpasswd reads the users and passwords from a htpasswd
|
|
// datastream in file and returns them. If an error is encountered,
|
|
// it is returned, together with a nil-Pointer for the HtpasswdFile.
|
|
func NewHtpasswd(file io.Reader) (*HtpasswdFile, error) {
|
|
cr := csv.NewReader(file)
|
|
cr.Comma = ':'
|
|
cr.Comment = '#'
|
|
cr.TrimLeadingSpace = true
|
|
|
|
records, err := cr.ReadAll()
|
|
if err != nil {
|
|
return nil, err
|
|
}
|
|
h := &HtpasswdFile{Users: make(map[string]string)}
|
|
for _, record := range records {
|
|
h.Users[record[0]] = record[1]
|
|
}
|
|
return h, nil
|
|
}
|
|
|
|
// Validate returns true if password matches the stored password
|
|
// for user. If no password for user is stored, or the password
|
|
// is wrong, false is returned.
|
|
func (h *HtpasswdFile) Validate(user string, password string) bool {
|
|
realPassword, exists := h.Users[user]
|
|
if !exists {
|
|
return false
|
|
}
|
|
if realPassword[:5] == "{SHA}" {
|
|
d := sha1.New()
|
|
d.Write([]byte(password))
|
|
if realPassword[5:] == base64.StdEncoding.EncodeToString(d.Sum(nil)) {
|
|
return true
|
|
}
|
|
} else {
|
|
log.Printf("Invalid htpasswd entry for %s. Must be a SHA entry.", user)
|
|
}
|
|
return false
|
|
}
|