From e61bcb91c43a13c7d5426806d85875d205f49475 Mon Sep 17 00:00:00 2001
From: gmemstr <bladesimmer@gmail.com>
Date: Sat, 15 Jul 2017 08:06:37 -0700
Subject: [PATCH] Basic HTTP authentication

Implemented basic login using standard WWW-Authenticate method
---
 admin.go          | 10 ++++++++++
 assets/admin.html |  1 +
 assets/index.html |  2 +-
 webserver.go      | 35 +++++++++++++++++++++++++++++++++++
 4 files changed, 47 insertions(+), 1 deletion(-)
 create mode 100644 admin.go
 create mode 100644 assets/admin.html

diff --git a/admin.go b/admin.go
new file mode 100644
index 0000000..2d4d6a3
--- /dev/null
+++ b/admin.go
@@ -0,0 +1,10 @@
+package main
+
+import (
+	"io/ioutil"
+	"fmt"
+)
+
+func CreateEpisode() {
+	
+}
\ No newline at end of file
diff --git a/assets/admin.html b/assets/admin.html
new file mode 100644
index 0000000..7fc564d
--- /dev/null
+++ b/assets/admin.html
@@ -0,0 +1 @@
+admin.html
\ No newline at end of file
diff --git a/assets/index.html b/assets/index.html
index 36dc2e6..3a6f47d 100644
--- a/assets/index.html
+++ b/assets/index.html
@@ -13,7 +13,7 @@
     
 </div>
 <footer>
-    <p>White Rabbit licensed under the GPLv3</p>
+    <p>White Rabbit licensed under the GPLv3 | <a href="/rss">RSS</a> <a href="/json">JSON</a></p>
 </footer>
 <script>
 get("/json", function(data){
diff --git a/webserver.go b/webserver.go
index 03b6f8f..6b5d282 100644
--- a/webserver.go
+++ b/webserver.go
@@ -5,6 +5,7 @@ import (
 	"io/ioutil"
 	"log"
 	"net/http"
+	"crypto/subtle"
 
 	"github.com/gorilla/mux"
 )
@@ -42,6 +43,39 @@ func HomeHandler(w http.ResponseWriter, r *http.Request) {
 	}
 }
 
+
+/*
+ * Code from stackoverflow by user Timmmm
+ * https://stackoverflow.com/questions/21936332/idiomatic-way-of-requiring-http-basic-auth-in-go/39591234#39591234
+*/
+func BasicAuth(handler http.HandlerFunc, username, password, realm string) http.HandlerFunc {
+
+    return func(w http.ResponseWriter, r *http.Request) {
+
+        user, pass, ok := r.BasicAuth()
+
+        if !ok || subtle.ConstantTimeCompare([]byte(user), []byte(username)) != 1 || subtle.ConstantTimeCompare([]byte(pass), []byte(password)) != 1 {
+            w.Header().Set("WWW-Authenticate", `Basic realm="White Rabbit"`)
+            w.WriteHeader(401)
+            w.Write([]byte("Unauthorised.\n"))
+            return
+        }
+
+        handler(w, r)
+    }
+}
+
+func AdminHandler(w http.ResponseWriter, r *http.Request) {
+	data, err := ioutil.ReadFile("assets/admin.html")
+
+	if err == nil {
+		w.Write(data)
+	} else {
+		w.WriteHeader(404)
+		w.Write([]byte("404 Something went wrong - " + http.StatusText(404)))
+	}
+}
+
 func main() {
 	go watch()
 	r := mux.NewRouter()
@@ -51,5 +85,6 @@ func main() {
 	r.HandleFunc("/rss", RssHandler)
 	r.HandleFunc("/json", JsonHandler)
 	http.Handle("/", r)
+	r.HandleFunc("/admin", BasicAuth(AdminHandler, "g", "password", "Login to White Rabbit admin interface"))
 	log.Fatal(http.ListenAndServe(":8000", r))
 }