| Absolute File Name: | /home/qt/qt5_coco/qt5/qtbase/src/network/access/qnetworkaccessauthenticationmanager.cpp |
| Source code | Switch to Preprocessed file |
| Line | Source | Count | ||||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 1 | /**************************************************************************** | - | ||||||||||||
| 2 | ** | - | ||||||||||||
| 3 | ** Copyright (C) 2016 The Qt Company Ltd. | - | ||||||||||||
| 4 | ** Contact: https://www.qt.io/licensing/ | - | ||||||||||||
| 5 | ** | - | ||||||||||||
| 6 | ** This file is part of the QtNetwork module of the Qt Toolkit. | - | ||||||||||||
| 7 | ** | - | ||||||||||||
| 8 | ** $QT_BEGIN_LICENSE:LGPL$ | - | ||||||||||||
| 9 | ** Commercial License Usage | - | ||||||||||||
| 10 | ** Licensees holding valid commercial Qt licenses may use this file in | - | ||||||||||||
| 11 | ** accordance with the commercial license agreement provided with the | - | ||||||||||||
| 12 | ** Software or, alternatively, in accordance with the terms contained in | - | ||||||||||||
| 13 | ** a written agreement between you and The Qt Company. For licensing terms | - | ||||||||||||
| 14 | ** and conditions see https://www.qt.io/terms-conditions. For further | - | ||||||||||||
| 15 | ** information use the contact form at https://www.qt.io/contact-us. | - | ||||||||||||
| 16 | ** | - | ||||||||||||
| 17 | ** GNU Lesser General Public License Usage | - | ||||||||||||
| 18 | ** Alternatively, this file may be used under the terms of the GNU Lesser | - | ||||||||||||
| 19 | ** General Public License version 3 as published by the Free Software | - | ||||||||||||
| 20 | ** Foundation and appearing in the file LICENSE.LGPL3 included in the | - | ||||||||||||
| 21 | ** packaging of this file. Please review the following information to | - | ||||||||||||
| 22 | ** ensure the GNU Lesser General Public License version 3 requirements | - | ||||||||||||
| 23 | ** will be met: https://www.gnu.org/licenses/lgpl-3.0.html. | - | ||||||||||||
| 24 | ** | - | ||||||||||||
| 25 | ** GNU General Public License Usage | - | ||||||||||||
| 26 | ** Alternatively, this file may be used under the terms of the GNU | - | ||||||||||||
| 27 | ** General Public License version 2.0 or (at your option) the GNU General | - | ||||||||||||
| 28 | ** Public license version 3 or any later version approved by the KDE Free | - | ||||||||||||
| 29 | ** Qt Foundation. The licenses are as published by the Free Software | - | ||||||||||||
| 30 | ** Foundation and appearing in the file LICENSE.GPL2 and LICENSE.GPL3 | - | ||||||||||||
| 31 | ** included in the packaging of this file. Please review the following | - | ||||||||||||
| 32 | ** information to ensure the GNU General Public License requirements will | - | ||||||||||||
| 33 | ** be met: https://www.gnu.org/licenses/gpl-2.0.html and | - | ||||||||||||
| 34 | ** https://www.gnu.org/licenses/gpl-3.0.html. | - | ||||||||||||
| 35 | ** | - | ||||||||||||
| 36 | ** $QT_END_LICENSE$ | - | ||||||||||||
| 37 | ** | - | ||||||||||||
| 38 | ****************************************************************************/ | - | ||||||||||||
| 39 | - | |||||||||||||
| 40 | #include "qnetworkaccessauthenticationmanager_p.h" | - | ||||||||||||
| 41 | #include "qnetworkaccessmanager.h" | - | ||||||||||||
| 42 | #include "qnetworkaccessmanager_p.h" | - | ||||||||||||
| 43 | - | |||||||||||||
| 44 | #include "QtCore/qbuffer.h" | - | ||||||||||||
| 45 | #include "QtCore/qurl.h" | - | ||||||||||||
| 46 | #include "QtCore/qvector.h" | - | ||||||||||||
| 47 | #include "QtCore/QMutexLocker" | - | ||||||||||||
| 48 | #include "QtNetwork/qauthenticator.h" | - | ||||||||||||
| 49 | - | |||||||||||||
| 50 | #include <algorithm> | - | ||||||||||||
| 51 | - | |||||||||||||
| 52 | QT_BEGIN_NAMESPACE | - | ||||||||||||
| 53 | - | |||||||||||||
| 54 | - | |||||||||||||
| 55 | - | |||||||||||||
| 56 | - | |||||||||||||
| 57 | class QNetworkAuthenticationCache: private QVector<QNetworkAuthenticationCredential>, | - | ||||||||||||
| 58 | public QNetworkAccessCache::CacheableObject | - | ||||||||||||
| 59 | { | - | ||||||||||||
| 60 | public: | - | ||||||||||||
| 61 | QNetworkAuthenticationCache() | - | ||||||||||||
| 62 | { | - | ||||||||||||
| 63 | setExpires(false); | - | ||||||||||||
| 64 | setShareable(true); | - | ||||||||||||
| 65 | reserve(1); | - | ||||||||||||
| 66 | } executed 315 times by 2 tests: end of blockExecuted by:
| 315 | ||||||||||||
| 67 | - | |||||||||||||
| 68 | QNetworkAuthenticationCredential *findClosestMatch(const QString &domain) | - | ||||||||||||
| 69 | { | - | ||||||||||||
| 70 | iterator it = std::lower_bound(begin(), end(), domain); | - | ||||||||||||
| 71 | if (it == end() && !isEmpty())
| 31-366 | ||||||||||||
| 72 | --it; executed 31 times by 1 test: --it;Executed by:
| 31 | ||||||||||||
| 73 | if (it == end() || !domain.startsWith(it->domain))
| 0-397 | ||||||||||||
| 74 | return 0; executed 315 times by 2 tests: return 0;Executed by:
| 315 | ||||||||||||
| 75 | return &*it; executed 397 times by 1 test: return &*it;Executed by:
| 397 | ||||||||||||
| 76 | } | - | ||||||||||||
| 77 | - | |||||||||||||
| 78 | void insert(const QString &domain, const QString &user, const QString &password) | - | ||||||||||||
| 79 | { | - | ||||||||||||
| 80 | QNetworkAuthenticationCredential *closestMatch = findClosestMatch(domain); | - | ||||||||||||
| 81 | if (closestMatch && closestMatch->domain == domain) {
| 0-358 | ||||||||||||
| 82 | // we're overriding the current credentials | - | ||||||||||||
| 83 | closestMatch->user = user; | - | ||||||||||||
| 84 | closestMatch->password = password; | - | ||||||||||||
| 85 | } else { executed 358 times by 1 test: end of blockExecuted by:
| 358 | ||||||||||||
| 86 | QNetworkAuthenticationCredential newCredential; | - | ||||||||||||
| 87 | newCredential.domain = domain; | - | ||||||||||||
| 88 | newCredential.user = user; | - | ||||||||||||
| 89 | newCredential.password = password; | - | ||||||||||||
| 90 | - | |||||||||||||
| 91 | if (closestMatch)
| 0-315 | ||||||||||||
| 92 | QVector<QNetworkAuthenticationCredential>::insert(++closestMatch, newCredential); never executed: QVector<QNetworkAuthenticationCredential>::insert(++closestMatch, newCredential); | 0 | ||||||||||||
| 93 | else | - | ||||||||||||
| 94 | QVector<QNetworkAuthenticationCredential>::insert(end(), newCredential); executed 315 times by 2 tests: QVector<QNetworkAuthenticationCredential>::insert(end(), newCredential);Executed by:
| 315 | ||||||||||||
| 95 | } | - | ||||||||||||
| 96 | } | - | ||||||||||||
| 97 | - | |||||||||||||
| 98 | virtual void dispose() Q_DECL_OVERRIDE { delete this; } executed 315 times by 2 tests: end of blockExecuted by:
| 315 | ||||||||||||
| 99 | }; | - | ||||||||||||
| 100 | - | |||||||||||||
| 101 | #ifndef QT_NO_NETWORKPROXY | - | ||||||||||||
| 102 | static QByteArray proxyAuthenticationKey(const QNetworkProxy &proxy, const QString &realm) | - | ||||||||||||
| 103 | { | - | ||||||||||||
| 104 | QUrl key; | - | ||||||||||||
| 105 | - | |||||||||||||
| 106 | switch (proxy.type()) { | - | ||||||||||||
| 107 | case QNetworkProxy::Socks5Proxy: executed 78 times by 2 tests: case QNetworkProxy::Socks5Proxy:Executed by:
| 78 | ||||||||||||
| 108 | key.setScheme(QLatin1String("proxy-socks5")); | - | ||||||||||||
| 109 | break; executed 78 times by 2 tests: break;Executed by:
| 78 | ||||||||||||
| 110 | - | |||||||||||||
| 111 | case QNetworkProxy::HttpProxy: executed 104 times by 2 tests: case QNetworkProxy::HttpProxy:Executed by:
| 104 | ||||||||||||
| 112 | case QNetworkProxy::HttpCachingProxy: executed 21 times by 1 test: case QNetworkProxy::HttpCachingProxy:Executed by:
| 21 | ||||||||||||
| 113 | key.setScheme(QLatin1String("proxy-http")); | - | ||||||||||||
| 114 | break; executed 125 times by 2 tests: break;Executed by:
| 125 | ||||||||||||
| 115 | - | |||||||||||||
| 116 | case QNetworkProxy::FtpCachingProxy: never executed: case QNetworkProxy::FtpCachingProxy: | 0 | ||||||||||||
| 117 | key.setScheme(QLatin1String("proxy-ftp")); | - | ||||||||||||
| 118 | break; never executed: break; | 0 | ||||||||||||
| 119 | - | |||||||||||||
| 120 | case QNetworkProxy::DefaultProxy: never executed: case QNetworkProxy::DefaultProxy: | 0 | ||||||||||||
| 121 | case QNetworkProxy::NoProxy: never executed: case QNetworkProxy::NoProxy: | 0 | ||||||||||||
| 122 | // shouldn't happen | - | ||||||||||||
| 123 | return QByteArray(); never executed: return QByteArray(); | 0 | ||||||||||||
| 124 | - | |||||||||||||
| 125 | // no default: | - | ||||||||||||
| 126 | // let there be errors if a new proxy type is added in the future | - | ||||||||||||
| 127 | } | - | ||||||||||||
| 128 | - | |||||||||||||
| 129 | if (key.scheme().isEmpty())
| 0-203 | ||||||||||||
| 130 | // proxy type not handled | - | ||||||||||||
| 131 | return QByteArray(); never executed: return QByteArray(); | 0 | ||||||||||||
| 132 | - | |||||||||||||
| 133 | key.setUserName(proxy.user()); | - | ||||||||||||
| 134 | key.setHost(proxy.hostName()); | - | ||||||||||||
| 135 | key.setPort(proxy.port()); | - | ||||||||||||
| 136 | key.setFragment(realm); | - | ||||||||||||
| 137 | return "auth:" + key.toEncoded(); executed 203 times by 2 tests: return "auth:" + key.toEncoded();Executed by:
| 203 | ||||||||||||
| 138 | } | - | ||||||||||||
| 139 | #endif | - | ||||||||||||
| 140 | - | |||||||||||||
| 141 | static inline QByteArray authenticationKey(const QUrl &url, const QString &realm) | - | ||||||||||||
| 142 | { | - | ||||||||||||
| 143 | QUrl copy = url; | - | ||||||||||||
| 144 | copy.setFragment(realm); | - | ||||||||||||
| 145 | return "auth:" + copy.toEncoded(QUrl::RemovePassword | QUrl::RemovePath | QUrl::RemoveQuery); executed 932 times by 4 tests: return "auth:" + copy.toEncoded(QUrl::RemovePassword | QUrl::RemovePath | QUrl::RemoveQuery);Executed by:
| 932 | ||||||||||||
| 146 | } | - | ||||||||||||
| 147 | - | |||||||||||||
| 148 | - | |||||||||||||
| 149 | #ifndef QT_NO_NETWORKPROXY | - | ||||||||||||
| 150 | void QNetworkAccessAuthenticationManager::cacheProxyCredentials(const QNetworkProxy &p, | - | ||||||||||||
| 151 | const QAuthenticator *authenticator) | - | ||||||||||||
| 152 | { | - | ||||||||||||
| 153 | Q_ASSERT(authenticator); | - | ||||||||||||
| 154 | Q_ASSERT(p.type() != QNetworkProxy::DefaultProxy); | - | ||||||||||||
| 155 | Q_ASSERT(p.type() != QNetworkProxy::NoProxy); | - | ||||||||||||
| 156 | - | |||||||||||||
| 157 | QMutexLocker mutexLocker(&mutex); | - | ||||||||||||
| 158 | - | |||||||||||||
| 159 | QString realm = authenticator->realm(); | - | ||||||||||||
| 160 | QNetworkProxy proxy = p; | - | ||||||||||||
| 161 | proxy.setUser(authenticator->user()); | - | ||||||||||||
| 162 | - | |||||||||||||
| 163 | // don't cache null passwords, empty password may be valid though | - | ||||||||||||
| 164 | if (authenticator->password().isNull())
| 6-54 | ||||||||||||
| 165 | return; executed 6 times by 2 tests: return;Executed by:
| 6 | ||||||||||||
| 166 | - | |||||||||||||
| 167 | // Set two credentials: one with the username and one without | - | ||||||||||||
| 168 | do { | - | ||||||||||||
| 169 | // Set two credentials actually: one with and one without the realm | - | ||||||||||||
| 170 | do { | - | ||||||||||||
| 171 | QByteArray cacheKey = proxyAuthenticationKey(proxy, realm); | - | ||||||||||||
| 172 | if (cacheKey.isEmpty())
| 0-138 | ||||||||||||
| 173 | return; // should not happen never executed: return; | 0 | ||||||||||||
| 174 | - | |||||||||||||
| 175 | QNetworkAuthenticationCache *auth = new QNetworkAuthenticationCache; | - | ||||||||||||
| 176 | auth->insert(QString(), authenticator->user(), authenticator->password()); | - | ||||||||||||
| 177 | authenticationCache.addEntry(cacheKey, auth); // replace the existing one, if there's any | - | ||||||||||||
| 178 | - | |||||||||||||
| 179 | if (realm.isEmpty()) {
| 30-108 | ||||||||||||
| 180 | break; executed 108 times by 2 tests: break;Executed by:
| 108 | ||||||||||||
| 181 | } else { | - | ||||||||||||
| 182 | realm.clear(); | - | ||||||||||||
| 183 | } executed 30 times by 2 tests: end of blockExecuted by:
| 30 | ||||||||||||
| 184 | } while (true); | - | ||||||||||||
| 185 | - | |||||||||||||
| 186 | if (proxy.user().isEmpty())
| 54 | ||||||||||||
| 187 | break; executed 54 times by 2 tests: break;Executed by:
| 54 | ||||||||||||
| 188 | else | - | ||||||||||||
| 189 | proxy.setUser(QString()); executed 54 times by 2 tests: proxy.setUser(QString());Executed by:
| 54 | ||||||||||||
| 190 | } while (true); | - | ||||||||||||
| 191 | } executed 54 times by 2 tests: end of blockExecuted by:
| 54 | ||||||||||||
| 192 | - | |||||||||||||
| 193 | QNetworkAuthenticationCredential | - | ||||||||||||
| 194 | QNetworkAccessAuthenticationManager::fetchCachedProxyCredentials(const QNetworkProxy &p, | - | ||||||||||||
| 195 | const QAuthenticator *authenticator) | - | ||||||||||||
| 196 | { | - | ||||||||||||
| 197 | QNetworkProxy proxy = p; | - | ||||||||||||
| 198 | if (proxy.type() == QNetworkProxy::DefaultProxy) {
| 0-65 | ||||||||||||
| 199 | proxy = QNetworkProxy::applicationProxy(); | - | ||||||||||||
| 200 | } never executed: end of block | 0 | ||||||||||||
| 201 | if (!proxy.password().isEmpty())
| 0-65 | ||||||||||||
| 202 | return QNetworkAuthenticationCredential(); // no need to set credentials if it already has them never executed: return QNetworkAuthenticationCredential(); | 0 | ||||||||||||
| 203 | - | |||||||||||||
| 204 | QString realm; | - | ||||||||||||
| 205 | if (authenticator)
| 1-64 | ||||||||||||
| 206 | realm = authenticator->realm(); executed 1 time by 1 test: realm = authenticator->realm();Executed by:
| 1 | ||||||||||||
| 207 | - | |||||||||||||
| 208 | QMutexLocker mutexLocker(&mutex); | - | ||||||||||||
| 209 | QByteArray cacheKey = proxyAuthenticationKey(proxy, realm); | - | ||||||||||||
| 210 | if (cacheKey.isEmpty())
| 0-65 | ||||||||||||
| 211 | return QNetworkAuthenticationCredential(); never executed: return QNetworkAuthenticationCredential(); | 0 | ||||||||||||
| 212 | if (!authenticationCache.hasEntry(cacheKey))
| 8-57 | ||||||||||||
| 213 | return QNetworkAuthenticationCredential(); executed 57 times by 2 tests: return QNetworkAuthenticationCredential();Executed by:
| 57 | ||||||||||||
| 214 | - | |||||||||||||
| 215 | QNetworkAuthenticationCache *auth = | - | ||||||||||||
| 216 | static_cast<QNetworkAuthenticationCache *>(authenticationCache.requestEntryNow(cacheKey)); | - | ||||||||||||
| 217 | QNetworkAuthenticationCredential cred = *auth->findClosestMatch(QString()); | - | ||||||||||||
| 218 | authenticationCache.releaseEntry(cacheKey); | - | ||||||||||||
| 219 | - | |||||||||||||
| 220 | // proxy cache credentials always have exactly one item | - | ||||||||||||
| 221 | Q_ASSERT_X(!cred.isNull(), "QNetworkAccessManager", | - | ||||||||||||
| 222 | "Internal inconsistency: found a cache key for a proxy, but it's empty"); | - | ||||||||||||
| 223 | return cred; executed 8 times by 1 test: return cred;Executed by:
| 8 | ||||||||||||
| 224 | } | - | ||||||||||||
| 225 | - | |||||||||||||
| 226 | #endif | - | ||||||||||||
| 227 | - | |||||||||||||
| 228 | void QNetworkAccessAuthenticationManager::cacheCredentials(const QUrl &url, | - | ||||||||||||
| 229 | const QAuthenticator *authenticator) | - | ||||||||||||
| 230 | { | - | ||||||||||||
| 231 | Q_ASSERT(authenticator); | - | ||||||||||||
| 232 | if (authenticator->isNull())
| 3-273 | ||||||||||||
| 233 | return; executed 3 times by 1 test: return;Executed by:
| 3 | ||||||||||||
| 234 | QString domain = QString::fromLatin1("/"); // FIXME: make QAuthenticator return the domain | - | ||||||||||||
| 235 | QString realm = authenticator->realm(); | - | ||||||||||||
| 236 | - | |||||||||||||
| 237 | QMutexLocker mutexLocker(&mutex); | - | ||||||||||||
| 238 | - | |||||||||||||
| 239 | // Set two credentials actually: one with and one without the username in the URL | - | ||||||||||||
| 240 | QUrl copy = url; | - | ||||||||||||
| 241 | copy.setUserName(authenticator->user()); | - | ||||||||||||
| 242 | do { | - | ||||||||||||
| 243 | QByteArray cacheKey = authenticationKey(copy, realm); | - | ||||||||||||
| 244 | if (authenticationCache.hasEntry(cacheKey)) {
| 177-358 | ||||||||||||
| 245 | QNetworkAuthenticationCache *auth = | - | ||||||||||||
| 246 | static_cast<QNetworkAuthenticationCache *>(authenticationCache.requestEntryNow(cacheKey)); | - | ||||||||||||
| 247 | auth->insert(domain, authenticator->user(), authenticator->password()); | - | ||||||||||||
| 248 | authenticationCache.releaseEntry(cacheKey); | - | ||||||||||||
| 249 | } else { executed 358 times by 1 test: end of blockExecuted by:
| 358 | ||||||||||||
| 250 | QNetworkAuthenticationCache *auth = new QNetworkAuthenticationCache; | - | ||||||||||||
| 251 | auth->insert(domain, authenticator->user(), authenticator->password()); | - | ||||||||||||
| 252 | authenticationCache.addEntry(cacheKey, auth); | - | ||||||||||||
| 253 | } executed 177 times by 1 test: end of blockExecuted by:
| 177 | ||||||||||||
| 254 | - | |||||||||||||
| 255 | if (copy.userName().isEmpty()) {
| 262-273 | ||||||||||||
| 256 | break; executed 273 times by 1 test: break;Executed by:
| 273 | ||||||||||||
| 257 | } else { | - | ||||||||||||
| 258 | copy.setUserName(QString()); | - | ||||||||||||
| 259 | } executed 262 times by 1 test: end of blockExecuted by:
| 262 | ||||||||||||
| 260 | } while (true); | - | ||||||||||||
| 261 | } executed 273 times by 1 test: end of blockExecuted by:
| 273 | ||||||||||||
| 262 | - | |||||||||||||
| 263 | /*! | - | ||||||||||||
| 264 | Fetch the credential data from the credential cache. | - | ||||||||||||
| 265 | - | |||||||||||||
| 266 | If auth is 0 (as it is when called from createRequest()), this will try to | - | ||||||||||||
| 267 | look up with an empty realm. That fails in most cases for HTTP (because the | - | ||||||||||||
| 268 | realm is seldom empty for HTTP challenges). In any case, QHttpNetworkConnection | - | ||||||||||||
| 269 | never sends the credentials on the first attempt: it needs to find out what | - | ||||||||||||
| 270 | authentication methods the server supports. | - | ||||||||||||
| 271 | - | |||||||||||||
| 272 | For FTP, realm is always empty. | - | ||||||||||||
| 273 | */ | - | ||||||||||||
| 274 | QNetworkAuthenticationCredential | - | ||||||||||||
| 275 | QNetworkAccessAuthenticationManager::fetchCachedCredentials(const QUrl &url, | - | ||||||||||||
| 276 | const QAuthenticator *authentication) | - | ||||||||||||
| 277 | { | - | ||||||||||||
| 278 | if (!url.password().isEmpty())
| 16-397 | ||||||||||||
| 279 | return QNetworkAuthenticationCredential(); // no need to set credentials if it already has them executed 16 times by 1 test: return QNetworkAuthenticationCredential();Executed by:
| 16 | ||||||||||||
| 280 | - | |||||||||||||
| 281 | QString realm; | - | ||||||||||||
| 282 | if (authentication)
| 89-308 | ||||||||||||
| 283 | realm = authentication->realm(); executed 89 times by 1 test: realm = authentication->realm();Executed by:
| 89 | ||||||||||||
| 284 | - | |||||||||||||
| 285 | QByteArray cacheKey = authenticationKey(url, realm); | - | ||||||||||||
| 286 | - | |||||||||||||
| 287 | QMutexLocker mutexLocker(&mutex); | - | ||||||||||||
| 288 | if (!authenticationCache.hasEntry(cacheKey))
| 31-366 | ||||||||||||
| 289 | return QNetworkAuthenticationCredential(); executed 366 times by 4 tests: return QNetworkAuthenticationCredential();Executed by:
| 366 | ||||||||||||
| 290 | - | |||||||||||||
| 291 | QNetworkAuthenticationCache *auth = | - | ||||||||||||
| 292 | static_cast<QNetworkAuthenticationCache *>(authenticationCache.requestEntryNow(cacheKey)); | - | ||||||||||||
| 293 | QNetworkAuthenticationCredential *cred = auth->findClosestMatch(url.path()); | - | ||||||||||||
| 294 | QNetworkAuthenticationCredential ret; | - | ||||||||||||
| 295 | if (cred)
| 0-31 | ||||||||||||
| 296 | ret = *cred; executed 31 times by 1 test: ret = *cred;Executed by:
| 31 | ||||||||||||
| 297 | authenticationCache.releaseEntry(cacheKey); | - | ||||||||||||
| 298 | return ret; executed 31 times by 1 test: return ret;Executed by:
| 31 | ||||||||||||
| 299 | } | - | ||||||||||||
| 300 | - | |||||||||||||
| 301 | void QNetworkAccessAuthenticationManager::clearCache() | - | ||||||||||||
| 302 | { | - | ||||||||||||
| 303 | authenticationCache.clear(); | - | ||||||||||||
| 304 | } executed 646 times by 2 tests: end of blockExecuted by:
| 646 | ||||||||||||
| 305 | - | |||||||||||||
| 306 | QT_END_NAMESPACE | - | ||||||||||||
| 307 | - | |||||||||||||
| Source code | Switch to Preprocessed file |