added bash http auth from proxy-auth.pl

[HTTP-Proxy-Archive.git] / proxy.pl

diff --git a/proxy.pl b/proxy.pl
index 80a546a..590da2d 100755 (executable)
--- a/proxy.pl
+++ b/proxy.pl
@@ -9,7 +9,21 @@ use HTTP::Proxy::BodyFilter::save;
 use HTTP::Proxy::BodyFilter::simple;
 use HTTP::Proxy::HeaderFilter::simple;
 
+use Data::Dump qw(dump);
+
+sub var_save {
+       my ( $dir, $name, $value ) = @_;
+       $value ||= "\n";
+       mkdir "var/$dir" unless -e "var/$dir";
+       open(my $fh, '>>', "var/$dir/$name") || die $!;
+       print $fh $value;
+       close($fh);
+}
+
+
+#
 # logger.pl
+#
 
 use CGI::Util qw( unescape );
 
@@ -79,7 +93,13 @@ my $get_filter = HTTP::Proxy::HeaderFilter::simple->new(
             print_headers( $req, @clt_hdr );
         }
         print STDOUT $message->status_line, "\n";
-        print_headers( $message, @srv_hdr );
+       print_headers( $message, @srv_hdr );
+
+       if ( my $cookie = $message->header( 'Set-Cookie' ) ) {
+               my $host = $req->uri->host;
+               warn "COOKIE: $cookie from $host\n";
+               var_save 'cookie' => $host;
+       }
     }
 );
 
@@ -119,7 +139,9 @@ else {
     $proxy->push_filter( response => $get_filter, mime => $args{mime} );
 }
 
+#
 # pdf.pl
+#
 
 my $saved;
 $proxy->push_filter(
@@ -137,22 +159,141 @@ $proxy->push_filter(
             my ( $self, $message ) = @_;    # for information, saorge
             $saved = 0;
         },
-        filter => sub {
-            my ( $self, $dataref, $message, $protocol, $buffer ) = @_;
-            $$dataref = $saved++ ? "" 
-              : sprintf '<p>Saving PDF file. Go <a href="%s">back</a></p>',
-                        $message->request->header('referer');
-        }
+#        filter => sub {
+#            my ( $self, $dataref, $message, $protocol, $buffer ) = @_;
+#            $$dataref = $saved++ ? "" 
+#              : sprintf '<p>Saving PDF file. Go <a href="%s">back</a></p>',
+#                        $message->request->header('referer');
+#        }
     ),
     # change the response Content-Type
     response => HTTP::Proxy::HeaderFilter::simple->new(
         sub {
             my ( $self, $headers, $response ) = @_;
-            $headers->content_type('text/html');
+#            $headers->content_type('text/html');
         }
     ),
 );
 
+#
+# proxy-auth.pl
+#
+
+
+use HTTP::Proxy qw( :log );
+use MIME::Base64 qw( encode_base64 );
+
+# the encoded user:password pair
+# login:  http
+# passwd: proxy
+my $token = "Basic " . encode_base64( "http:proxy", '' );
+
+# the authentication filter
+$proxy->push_filter(
+    request => HTTP::Proxy::HeaderFilter::simple->new(
+        sub {
+            my ( $self, $headers, $request ) = @_;
+
+            # check the token against all credentials
+            my $ok = 0;
+            $_ eq $token && $ok++
+                for $self->proxy->hop_headers->header('Proxy-Authorization');
+
+            # no valid credential
+            if ( !$ok ) {
+                my $response = HTTP::Response->new(407);
+                $response->header(
+                    Proxy_Authenticate => 'Basic realm="HTTP::Proxy"' );
+                $self->proxy->response($response);
+            }
+        }
+    )
+);
+
+
+#
+# admin interface
+#
+
+sub debug_on { -e 'var/debug' }
+sub debug_dump { -e 'var/debug' && warn "## ", dump( @_ ) }
+
+my $admin_filter = HTTP::Proxy::HeaderFilter::simple->new( sub {
+   my ( $self, $headers, $message ) = @_;
+warn "XXX [", $headers->header('x-forwarded-for'), '] ', $message->uri, "\n";
+
+       print $message->headers_as_string if debug_on;
+
+       my $host = $message->uri->host;
+       var_save 'hits' => $host;
+       return unless $host eq $proxy->host;
+
+       if ( my $q = $message->uri->query ) {
+               if ( $q =~ m{debug} ) {
+                       -e 'var/debug' ? unlink 'var/debug' : open(my $touch,'>','var/debug');
+               }
+       }
+       debug_dump( $headers, $message );
+
+       my $host_port = $proxy->host . ':' . $proxy->port;
+
+       my $res = HTTP::Response->new( 200 );
+
+       if ( $message->uri->path =~ m/(proxy.pac|wpad.dat)/ ) {
+               $res->content_type('application/x-ns-proxy-autoconfig');
+               $res->content(qq|
+
+function FindProxyForURL(url, host) {
+//     if (shExpMatch(url, "*.example.com:*/*"))               {return "DIRECT";}
+
+       if (shExpMatch(url, "*.js")) return "DIRECT";
+       if (shExpMatch(url, "*.css")) return "DIRECT";
+       if (shExpMatch(url, "*.gif")) return "DIRECT";
+       if (shExpMatch(url, "*.png")) return "DIRECT";
+       if (shExpMatch(url, "*.ico")) return "DIRECT";
+       if (shExpMatch(url, "*.jpg")) return "DIRECT";
+ 
+//      if (isInNet(host, "10.0.0.0",  "255.255.248.0"))    {
+//             return "PROXY fastproxy.example.com:8080";
+//     }
+
+       // we don't want to see this traffic! 
+       if (shExpMatch(url, "*.google.*")) return "DIRECT";
+
+       return "PROXY $host_port; DIRECT";
+}
+
+               |);
+               $self->proxy->response( $res );
+               return;
+       }
+
+       $res->content_type('text/html');
+       $res->content(qq|
+
+<h1>HTTP Proxy Archive</h1>
+
+<div style="background: #ff0; padding: 1em;">
+
+Copy following url into automatic proxy configuration and enable it:
+<p>
+<a href="http://$host_port/proxy.pac">http://$host_port/proxy.pac</a>
+
+</div>
+
+       | 
+       . qq|<a href=/>/</a> <a href="?debug">debug</a>|
+       );
+
+       $self->proxy->response( $res );
+} );
+$proxy->push_filter( request => $admin_filter );
+
+
+#
+# start
+#
+
 warn "listen on host ", $proxy->host, " port ", $proxy->port, "\n";
 
 $proxy->start;