basic auth

auth.go

@@ -1,9 +1,28 @@
 package main
 
 import (
+	"errors"
 	"net/http"
 )
 
-func Authorize(r *http.Request) bool {
+func Authorize(r *http.Request) error {
-	return true
+	username, password, ok := r.BasicAuth()
+	if !ok {
+		return errors.New("malformed basic auth credentials")
+	}
+
+	repo, err := RepositoryName(r.RequestURI)
+	if err != nil {
+		return err
+	}
+
+	if username != "user" || password != "pass" {
+		return errors.New("unknown user")
+	}
+
+	if username != repo {
+		return errors.New("unauthorized")
+	}
+
+	return nil
 }

handlers.go

@@ -84,7 +84,7 @@ func ListBlob(w http.ResponseWriter, r *http.Request, c *Context) {
 		return
 	}
 	bt := BackendType(uri)
-	if bt.IsNull() {
+	if string(bt) == "" {
 		http.NotFound(w, r)
 		return
 	}
@@ -114,7 +114,7 @@ func HeadBlob(w http.ResponseWriter, r *http.Request, c *Context) {
 		return
 	}
 	bt := BackendType(uri)
-	if bt.IsNull() {
+	if string(bt) == "" {
 		http.NotFound(w, r)
 		return
 	}
@@ -142,7 +142,7 @@ func GetBlob(w http.ResponseWriter, r *http.Request, c *Context) {
 		return
 	}
 	bt := BackendType(uri)
-	if bt.IsNull() {
+	if string(bt) == "" {
 		http.NotFound(w, r)
 		return
 	}
@@ -172,7 +172,7 @@ func PostBlob(w http.ResponseWriter, r *http.Request, c *Context) {
 		return
 	}
 	bt := BackendType(uri)
-	if bt.IsNull() {
+	if string(bt) == "" {
 		http.NotFound(w, r)
 		return
 	}
@@ -191,6 +191,7 @@ func PostBlob(w http.ResponseWriter, r *http.Request, c *Context) {
 		http.NotFound(w, r)
 		return
 	}
+	w.WriteHeader(201)
 }
 
 func DeleteBlob(w http.ResponseWriter, r *http.Request, c *Context) {
@@ -206,7 +207,7 @@ func DeleteBlob(w http.ResponseWriter, r *http.Request, c *Context) {
 		return
 	}
 	bt := BackendType(uri)
-	if bt.IsNull() {
+	if string(bt) == "" {
 		http.NotFound(w, r)
 		return
 	}

repository.go

@@ -1,6 +1,7 @@
 package main
 
 import (
+	"io"
 	"io/ioutil"
 	"os"
 	"path/filepath"
@@ -74,7 +75,7 @@ func (r *Repository) HasBlob(bt backend.Type, id backend.ID) bool {
 	return true
 }
 
-func (r *Repository) ReadBlob(bt backend.Type, id backend.ID) (*os.File, error) {
+func (r *Repository) ReadBlob(bt backend.Type, id backend.ID) (io.ReadSeeker, error) {
 	file := filepath.Join(r.path, string(bt), id.String())
 	f, err := os.Open(file)
 	if err != nil {

router.go

@@ -18,14 +18,14 @@ func (router Router) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 
 	log.Printf("%s %s", m, u)
 
-	if Authorize(r) {
+	if err := Authorize(r); err == nil {
 		if handler := RestAPI(m, u); handler != nil {
 			handler(w, r, &router.Context)
 		} else {
 			http.Error(w, "not found", 404)
 		}
 	} else {
-		http.Error(w, "unauthorized", 403)
+		http.Error(w, err.Error(), 403)
 	}
 }
 
@@ -54,7 +54,7 @@ func RestAPI(m string, u string) Handler {
 
 	// Route blob requests
 	id := BlobID(u)
-	if len(s) == 4 && !bt.IsNull() && bt != backend.Config {
+	if len(s) == 4 && string(bt) != "" && bt != backend.Config {
 		if s[3] == "" && m == "GET" {
 			return ListBlob
 		} else if !id.IsNull() {

variables.go

@@ -33,11 +33,30 @@ func BackendType(u string) backend.Type {
 	s := strings.Split(u, "/")
 	var bt backend.Type
 	if len(s) > 2 {
-		bt, _ = backend.ParseType(s[2])
+		bt = parseBackendType(s[2])
 	}
 	return bt
 }
 
+func parseBackendType(u string) backend.Type {
+	switch u {
+	case string(backend.Config):
+		return backend.Config
+	case string(backend.Data):
+		return backend.Data
+	case string(backend.Snapshot):
+		return backend.Snapshot
+	case string(backend.Key):
+		return backend.Key
+	case string(backend.Index):
+		return backend.Index
+	case string(backend.Lock):
+		return backend.Lock
+	default:
+		return ""
+	}
+}
+
 // Returns the blob ID for a given path
 func BlobID(u string) backend.ID {
 	s := strings.Split(u, "/")