From fd7f90367ecdb998ac90139db7240990422f0256 Mon Sep 17 00:00:00 2001
From: Holger Brunn <hbrunn@therp.nl>
Date: Tue, 14 Jan 2014 14:24:48 +0100
Subject: [PATCH] [ADD] auth_from_http_basic

---
 auth_from_http_basic/__init__.py             |  40 ++++++++++++++
 auth_from_http_basic/__openerp__.py          |  52 +++++++++++++++++++
 auth_from_http_basic/static/src/img/icon.png | Bin 0 -> 1142 bytes
 3 files changed, 92 insertions(+)
 create mode 100644 auth_from_http_basic/__init__.py
 create mode 100644 auth_from_http_basic/__openerp__.py
 create mode 100644 auth_from_http_basic/static/src/img/icon.png

diff --git a/auth_from_http_basic/__init__.py b/auth_from_http_basic/__init__.py
new file mode 100644
index 000000000..26fa1ad00
--- /dev/null
+++ b/auth_from_http_basic/__init__.py
@@ -0,0 +1,40 @@
+# -*- coding: utf-8 -*-
+##############################################################################
+#
+#    OpenERP, Open Source Management Solution
+#    This module copyright (C) 2014 Therp BV (<http://therp.nl>).
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+##############################################################################
+from openerp.addons.web.http import WebRequest
+from openerp.addons.web.controllers.main import db_list
+
+old_init = WebRequest.init
+
+def init(self, params):
+    old_init(self, params)
+    if self.httprequest.authorization and not self.session._login:
+        dbs = db_list(self)
+        self.session.authenticate(
+                dbs and dbs[0],
+                self.httprequest.authorization.username,
+                self.httprequest.authorization.password,
+                dict(
+                    base_location=self.httprequest.url_root.rstrip('/'),
+                    HTTP_HOST=self.httprequest.environ['HTTP_HOST'],
+                    REMOTE_ADDR=self.httprequest.environ['REMOTE_ADDR']
+                    ))
+
+WebRequest.init = init
diff --git a/auth_from_http_basic/__openerp__.py b/auth_from_http_basic/__openerp__.py
new file mode 100644
index 000000000..461dd3385
--- /dev/null
+++ b/auth_from_http_basic/__openerp__.py
@@ -0,0 +1,52 @@
+# -*- coding: utf-8 -*-
+##############################################################################
+#
+#    OpenERP, Open Source Management Solution
+#    This module copyright (C) 2014 Therp BV (<http://therp.nl>).
+#
+#    This program is free software: you can redistribute it and/or modify
+#    it under the terms of the GNU Affero General Public License as
+#    published by the Free Software Foundation, either version 3 of the
+#    License, or (at your option) any later version.
+#
+#    This program is distributed in the hope that it will be useful,
+#    but WITHOUT ANY WARRANTY; without even the implied warranty of
+#    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+#    GNU Affero General Public License for more details.
+#
+#    You should have received a copy of the GNU Affero General Public License
+#    along with this program.  If not, see <http://www.gnu.org/licenses/>.
+#
+##############################################################################
+{
+    "name" : "Authenticate via HTTP basic authentication",
+    "version" : "1.0",
+    "author" : "Therp BV",
+    "complexity": "expert",
+    "description": """
+In an environment where several web applications authenticate against the same
+source, the simplest way to attain single sign on would be to have the
+webserver handle authentication and pass the login information via HTTP headers
+to the application it proxies.
+
+This addon allows for this setup. Technically, it picks up the HTTP
+Authorization header, extract a username and a password from that and tries to
+login into the first database found in the database list.
+    """,
+    "category" : "",
+    "depends" : [
+    ],
+    "data" : [
+    ],
+    "js": [
+    ],
+    "css": [
+    ],
+    "qweb": [
+    ],
+    "auto_install": False,
+    "installable": True,
+    "external_dependencies" : {
+        'python' : [],
+    },
+}
diff --git a/auth_from_http_basic/static/src/img/icon.png b/auth_from_http_basic/static/src/img/icon.png
new file mode 100644
index 0000000000000000000000000000000000000000..4c7ab302908e114888446d84d3493fa726033c1f
GIT binary patch
literal 1142
zcmeAS@N?(olHy`uVBq!ia0vp^0U*r53?z4+XPOVBSkfJR9T^xl_H+M9WCijWi-X*q
z7}lMWc?skwBzpw;GB8xBF)%c=FfjZA3N^f7U???UV0e|lz+g3lfkC`r&aOZkpuXS$
zpAc7|0+Vy!%`Sd3J@*~Rz=H@Xz@vBMNCCrhU++~OAXQKj<QEL285miZ_{7V(vUOQm
z6_!r1cV01f-XirSG1Co=O;=e))mlYsYq@PP*AcZ7l#|k1Zo#d{p|Nnm+I!0u2iSOS
zj92wOQY}068k-oq+5C_;kv;lNyt`tva?*r?4JPO3WeCq<4&{;YZ=dLEbU{sGwZN}b
zP=aAh@^*J&=wOxg0CG4BJR*yM3F<lsGdgL^t^g{S>gnPb5^?zLm6yRy4l)f7mx|d;
zx?*(k%?4)UEmyi0Ecrc2=k&YFn|8nX@qd4)(saLN%zo##oL4V9SpH%8W(I{5_Kby-
zn<aAI{1#GUFYLa_d_c;IfyHr_#F4Aa42OL!)~zwyEtOyV;+<g1Zn4PA4_}w8OqVMu
zfAOxgYM05LDeIRl`2Reie8KYYtJmdCq+}$n@G2Ojm{`Q*PgwTyf=9)aX$FF4WMz{x
zDlONsBp*Fnk(6ZQvU-N*2|wdmy#fy``sUB{EfPxP+woky<x*GtlZAh#PXBY?dP;g_
z>eS~VhopAyb6lBS&$U5E`<Kw{%&;cs@-0hC&UQuLZjn*(u2$Hr94{uH**Z&f_w2QH
zhi&y2{tw)j@@+NGhX)rbF1%|gW$iz7TwQ8;`t#I--QIiVDaf6Q&3v-%^V5U(q&Ll5
z5Mj9N%zT!~f`+;~|C&~W%YC`GT(t6K{^tp$ABA2C+OS@2fBF2>gKppbdV7NQIC+SE
zKe2ts8LoR*Hw$jqc<S+aAx-W&5t&oRWqAyI%$<!*>IEDHSU_mi4;HoUDLTgOJMIHx
zO|`@|q9i4;B-JXpC>2OC7#SEE>l#?<8d`)H8e5qfSQ#5>8yHy`7<AVhd5WSTH$Npa
jtrDuiT-U%Hq`?TN#}c9;vBcCHsDZ)L)z4*}Q$iB}p<fKL

literal 0
HcmV?d00001