How to serve static files with basic authentication?

Question

I cannot make basic authentication work with http.FileServer using github.com/abbot/go-http-auth.

package main

import (
    "fmt"
    "log"
    "net/http"

    "github.com/abbot/go-http-auth"
)

func Secret(user, realm string) string {
    users := map[string]string{
        "john": "$1$dlPL2MqE$oQmn16q49SqdmhenQuNgs1", //hello
    }

    if a, ok := users[user]; ok {
        return a
    }
    return ""
}

func doRoot(w http.ResponseWriter, r *http.Request) {
    fmt.Fprintf(w, "<h1>static file server</h1><p><a href='./static'>folder</p>")
}

func handleFileServer(w http.ResponseWriter, r *http.Request) {
    fs := http.FileServer(http.Dir("static"))
    http.StripPrefix("/static/", fs)
}

func main() {

    authenticator := auth.NewBasicAuthenticator("localhost", Secret)

    // how to secure the FileServer with basic authentication??
    // fs := http.FileServer(http.Dir("static"))
    // http.Handle("/static/", http.StripPrefix("/static/", fs))

    http.HandleFunc("/static/", auth.JustCheck(authenticator, handleFileServer))

    http.HandleFunc("/", auth.JustCheck(authenticator, doRoot))

    log.Println(`Listening... http://localhost:3000
 folder is ./static
 authentication in map users`)
    http.ListenAndServe(":3001", nil)
}

The code:

fs := http.FileServer(http.Dir("static"))
http.Handle("/static/", http.StripPrefix("/static/", fs))

works in main() without authentication, but cannot use it along with auth.JustCheck. I tried with handleFileServer function, but nothing is displayed. What's the trick?

did you try `http.HandleFunc("/static/", auth.JustCheck(authenticator, http.StripPrefix(http.FileServer(http.Dir("static"))).ServeHTTP)`? — OneOfOne, Aug 28 '14 at 17:28

OneOfOne · Accepted Answer · 2014-08-29T12:44:06.633

10

You need to return StripPrefix's ServeHTTP method, for example:

func handleFileServer(dir, prefix string) http.HandlerFunc {
    fs := http.FileServer(http.Dir(dir))
    realHandler := http.StripPrefix(prefix, fs).ServeHTTP
    return func(w http.ResponseWriter, req *http.Request) {
        log.Println(req.URL)
        realHandler(w, req)
    }
}

func main()
    //....
    http.HandleFunc("/static/", auth.JustCheck(authenticator, handleFileServer("/tmp", "/static/")))
    //....
}

edited Aug 29 '14 at 12:44

answered Aug 28 '14 at 17:36

OneOfOne

95,033
20
184
185

Thank you very much, specially for refining your comment to a working code. I should now find a way to remove the need to write twice the "static" url prefix. – jgran Aug 29 '14 at 07:48
But still, how to have access to arguments (w http.ResponseWriter, r *http.Request) as in function doRoot? I'm stuck with it. – jgran Aug 29 '14 at 08:05

How to serve static files with basic authentication?

1 Answers1