Moduleservant-server-0.20.2Haskell2010

Servant.Server.Internal.BasicAuth

2 types
3 values

Packageservant-server-0.20.2
Exports5
LanguageHaskell2010
LicenceBSD-3-Clause
SourceBasicAuth.hs

Basic Auth

5 declarations

datadata BasicAuthResult usr

servant-server's current implementation of basic authentication is not immune to certain kinds of timing attacks. Decoding payloads does not take a fixed amount of time.

The result of authentication/authorization

Instances6Functor, Eq, Read, Show, Generic, Rep

Functor BasicAuthResultDefined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
Eq usr => Eq (BasicAuthResult usr)Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
Read usr => Read (BasicAuthResult usr)Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
Show usr => Show (BasicAuthResult usr)Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
Generic (BasicAuthResult usr)Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
type Rep (BasicAuthResult usr) = D1 ('MetaData "BasicAuthResult" "Servant.Server.Internal.BasicAuth" "servant-server-0.20.2-DEGy5HWu5CN9qp6ok675uv" 'False) ((C1 ('MetaCons "Unauthorized" 'PrefixI 'False) U1 :+: C1 ('MetaCons "BadPassword" 'PrefixI 'False) U1) :+: (C1 ('MetaCons "NoSuchUser" 'PrefixI 'False) U1 :+: C1 ('MetaCons "Authorized" 'PrefixI 'False) (S1 ('MetaSel 'Nothing 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedStrict) (Rec0 usr))))Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth

newtypenewtype BasicAuthCheck usr

Datatype wrapping a function used to check authentication.

Constructors

BasicAuthCheck
- unBasicAuthCheck :: BasicAuthData -> IO (BasicAuthResult usr)

Instances3Functor, Generic, Rep

Functor BasicAuthCheckDefined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
Generic (BasicAuthCheck usr)Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth
type Rep (BasicAuthCheck usr) = D1 ('MetaData "BasicAuthCheck" "Servant.Server.Internal.BasicAuth" "servant-server-0.20.2-DEGy5HWu5CN9qp6ok675uv" 'True) (C1 ('MetaCons "BasicAuthCheck" 'PrefixI 'True) (S1 ('MetaSel ('Just "unBasicAuthCheck") 'NoSourceUnpackedness 'NoSourceStrictness 'DecidedLazy) (Rec0 (BasicAuthData -> IO (BasicAuthResult usr)))))Defined in servant-server-0.20.2 · Servant.Server.Internal.BasicAuth

valuemkBAChallengerHdr :: ByteString -> Header

Internal method to make a basic-auth challenge

valuedecodeBAHdr :: Request -> Maybe BasicAuthData

Find and decode an Authorization header from the request as Basic Auth

valuerunBasicAuth :: Request -> ByteString -> BasicAuthCheck usr -> DelayedIO usr

Run and check basic authentication, returning the appropriate http error per the spec.