Re: How do I password-protect my HTTP::Proxy daemon?

[superfrink]

The following includes hints scattered through the thread login & password.

The HTTP::Proxy documentation doesn't explicitly mention "login" or "password", but it does talk about "authentication".

HTTP::Proxy does not have options to enable a password protection system; instead, you have to add a "filter" for authentication. HTTP::Proxy::HeaderFilter::simple can create such a filter.

The HTTP-Proxy distribution includes an example program, proxy-auth.pl, which demonstrates how to add a BasicAuth style password to a proxy.

Below is a copy of this program with some customizations to (1) specify the port, (2) allow any IP address to use the proxy, and (3) disable some headers added by the proxy.

#!/usr/bin/perl -w

use HTTP::Proxy qw( :log );
use HTTP::Proxy::HeaderFilter::simple;
use MIME::Base64 qw( encode_base64 );
use strict;

# the encoded user:password pair
my $token = "Basic " . encode_base64( "warren:12345" );
chomp $token;    # grr

# a very simple proxy that requires authentication
# login/password: http/proxy
my $proxy = HTTP::Proxy->new;
$proxy->port( 3128 ); # the classical accessors are here!
$proxy->host( undef ); # allow any IP addresses.
$proxy->via( '' ); # hide proxy presence.
$proxy->x_forwarded_for( '' ); # hide proxy presence.
# $proxy->logmask( shift || NONE );
$proxy->logmask( shift || STATUS );

# the authentication filter
$proxy->push_filter(
    request => HTTP::Proxy::HeaderFilter::simple->new(
        sub {
            my ( $self, $headers, $request ) = @_;
            my $auth = $self->proxy->hop_headers->header('Proxy-Author
+ization') || '';

            # check the credentials
            if ( $auth ne $token ) {
                my $response = HTTP::Response->new(407);
                $response->header( Proxy_Authenticate => 'Basic realm=
+"HTTP::Proxy"' );
                $self->proxy->response($response);
            }
        }
    )
);

$proxy->start;