mod_authz_default.c [plain text]
#include "apr_strings.h"
#include "apr_md5.h"
#include "ap_config.h"
#include "httpd.h"
#include "http_config.h"
#include "http_core.h"
#include "http_log.h"
#include "http_protocol.h"
#include "http_request.h"
typedef struct {
int authoritative;
} authz_default_config_rec;
static void *create_authz_default_dir_config(apr_pool_t *p, char *d)
{
authz_default_config_rec *conf = apr_palloc(p, sizeof(*conf));
conf->authoritative = 1;
return conf;
}
static const command_rec authz_default_cmds[] =
{
AP_INIT_FLAG("AuthzDefaultAuthoritative", ap_set_flag_slot,
(void *)APR_OFFSETOF(authz_default_config_rec, authoritative),
OR_AUTHCFG,
"Set to 'Off' to allow access control to be passed along to "
"lower modules. (default is On.)"),
{NULL}
};
module AP_MODULE_DECLARE_DATA authz_default_module;
static int check_user_access(request_rec *r)
{
authz_default_config_rec *conf = ap_get_module_config(r->per_dir_config,
&authz_default_module);
int m = r->method_number;
int method_restricted = 0;
register int x;
const apr_array_header_t *reqs_arr = ap_requires(r);
require_line *reqs;
if (!reqs_arr) {
return OK;
}
reqs = (require_line *)reqs_arr->elts;
for (x = 0; x < reqs_arr->nelts; x++) {
if (!(reqs[x].method_mask & (AP_METHOD_BIT << m))) {
continue;
}
method_restricted = 1;
break;
}
if (method_restricted == 0) {
return OK;
}
if (!(conf->authoritative)) {
return DECLINED;
}
ap_log_rerror(APLOG_MARK, APLOG_ERR, 0, r,
"access to %s failed, reason: require directives "
"present and no Authoritative handler.", r->uri);
ap_note_auth_failure(r);
return HTTP_UNAUTHORIZED;
}
static void register_hooks(apr_pool_t *p)
{
ap_hook_auth_checker(check_user_access,NULL,NULL,APR_HOOK_LAST);
}
module AP_MODULE_DECLARE_DATA authz_default_module =
{
STANDARD20_MODULE_STUFF,
create_authz_default_dir_config,
NULL,
NULL,
NULL,
authz_default_cmds,
register_hooks
};