Class HttpServerRequestAuthentication

Returns the authentication realm for a request.

May be overridden by a subclass, which then can return different realms for different paths.

Parameters:

• req (http.server._HttpServerRequest) - HTTP request context

Returns: string

Authentication realm

Determines whether authentication is required for a request.

To enable authentication, override this function in a subclass and return True. AUTH_REALM must be set.

Parameters:

• req (http.server._HttpServerRequest) - HTTP request context

Called before a request is handled.

Parameters:

• req (http.server._HttpServerRequest) - HTTP request context

Extracts a user and a password from the http authorization header.

Parameters:

• req (http.server._HttpServerRequest) - HTTP request

Returns: (str, str)

A tuple containing a user and a password. One or both values might be None if they are not presented

Checks the credentiales.

This function MUST be overridden by a subclass.

Extracts a scheme and a password from the expected_password.

Parameters:

• expected_password (str) - Username and password encoded as Base64

Returns: (str, str)

A tuple containing a scheme and a password. Both values will be None when an invalid scheme or password encoded

Checks the password for basic authentication.

As long as they don't start with an opening brace ("{"), old passwords are supported. A new scheme uses H(A1) from RFC2617, where H is MD5 and A1 consists of the username, the authentication realm and the actual password.

Parameters:

• username (string) - Username from HTTP headers
• password (string) - Password from HTTP headers
• expected (string) - Expected password with optional scheme prefix (e.g. from users file)
• realm (string) - Authentication realm