1 /*
2 * ====================================================================
3 * Licensed to the Apache Software Foundation (ASF) under one
4 * or more contributor license agreements. See the NOTICE file
5 * distributed with this work for additional information
6 * regarding copyright ownership. The ASF licenses this file
7 * to you under the Apache License, Version 2.0 (the
8 * "License"); you may not use this file except in compliance
9 * with the License. You may obtain a copy of the License at
10 *
11 * http://www.apache.org/licenses/LICENSE-2.0
12 *
13 * Unless required by applicable law or agreed to in writing,
14 * software distributed under the License is distributed on an
15 * "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
16 * KIND, either express or implied. See the License for the
17 * specific language governing permissions and limitations
18 * under the License.
19 * ====================================================================
20 *
21 * This software consists of voluntary contributions made by many
22 * individuals on behalf of the Apache Software Foundation. For more
23 * information on the Apache Software Foundation, please see
24 * <http://www.apache.org/>.
25 *
26 */
27
28 package org.apache.http.localserver;
29
30 import org.apache.commons.codec.BinaryDecoder;
31 import org.apache.commons.codec.DecoderException;
32 import org.apache.commons.codec.binary.Base64;
33 import org.apache.http.Header;
34 import org.apache.http.HttpException;
35 import org.apache.http.HttpRequest;
36 import org.apache.http.ProtocolException;
37 import org.apache.http.auth.AUTH;
38 import org.apache.http.util.EncodingUtils;
39
40 public class BasicAuthTokenExtractor {
41
42 public String extract(final HttpRequest request) throws HttpException {
43 String auth = null;
44
45 final Header h = request.getFirstHeader(AUTH.WWW_AUTH_RESP);
46 if (h != null) {
47 final String s = h.getValue();
48 if (s != null) {
49 auth = s.trim();
50 }
51 }
52
53 if (auth != null) {
54 final int i = auth.indexOf(' ');
55 if (i == -1) {
56 throw new ProtocolException("Invalid Authorization header: " + auth);
57 }
58 final String authscheme = auth.substring(0, i);
59 if (authscheme.equalsIgnoreCase("basic")) {
60 final String s = auth.substring(i + 1).trim();
61 try {
62 final byte[] credsRaw = EncodingUtils.getAsciiBytes(s);
63 final BinaryDecoder codec = new Base64();
64 auth = EncodingUtils.getAsciiString(codec.decode(credsRaw));
65 } catch (final DecoderException ex) {
66 throw new ProtocolException("Malformed BASIC credentials");
67 }
68 }
69 }
70 return auth;
71 }
72
73 }