用来 authenticate 的 Directives

来源：互联网发布：mysql count查询太慢编辑：程序博客网时间：2024/06/13 07:54

authenticate 这个Directives 使用了http的

WWW-Authenticate

来实现认证的功能,这个没怎用,百度了下

http://blog.163.com/hongshaoguoguo@126/blog/static/18046981201322384241640/

创建authenticate ,authenticate 跟route构建是不同个线程的

  def authenticator(userPass: Option[UserPass]): Future[Option[String]] = Future {       //检查用户      if (userPass.exists(up => up.user == "admin" && up.pass == "admin")) Some(userPass.get.user)      else None    }

  val route = sealRoute {      path("secured") {        authenticate(BasicAuth(authenticator _, realm = "secure site")) { userName =>          complete(s"The user is '$userName'")        }      }  }

定义跟Directives 的使用一样

注意的是这里

  /**   * "Seals" a route by wrapping it with exception handling and rejection conversion.   */  def sealRoute(route: Route)(implicit eh: ExceptionHandler, rh: RejectionHandler): Route =    (handleExceptions(eh) & handleRejections(sealRejectionHandler(rh)))(route)

整个代码

import akka.actor.{Props, ActorSystem}import akka.io.IOimport akka.util.Timeoutimport spray.can.Httpimport spray.routing._import spray.http._import spray.routing.authentication.{UserPass, BasicAuth}import scala.concurrent.duration._import scala.concurrent.Futureimport scala.concurrent.ExecutionContext.Implicits.globalobject ActorTest5 extends App{  implicit val system = ActorSystem("mySystem")  val se = system.actorOf(Props[MyService2])  implicit val timeout = Timeout(5.seconds)  IO(Http) ! Http.Bind(se,interface = "localhost",port=8080)}class MyService2 extends HttpServiceActor {  def authenticator(userPass: Option[UserPass]): Future[Option[String]] = Future {       //检查用户      if (userPass.exists(up => up.user == "admin" && up.pass == "admin")) Some(userPass.get.user)      else None    }  val route = sealRoute {      path("secured") {        authenticate(BasicAuth(authenticator _, realm = "secure site")) { userName =>          complete(s"The user is '$userName'")        }      }  }  def receive = runRoute(route)}

抓包分析

由于wireshark无法抓取本地连接,我们修改url,把他发给百度,让后截取包分析

重要是这句

Authorization: Basic YWRtaW46YWRtaW4=

0 0