blocks|key|1636315|text|我认为您将需要编写自己的中间件，因为理想情况下(基于对RFC+2617的快速读取)，当未通过身份验证时，您将返回一个带有基本和摘要挑战的WWW-Authenticate报头(对于只了解基本的用户代理，使用Basic+first+)。|type|unstyled|depth|inlineStyleRanges|entityRanges|offset|length|data|1636316|entityMap|0|LINK|mutability|MUTABLE|url|http://www.ietf.org/rfc/rfc2617.txt^0|R|8|0|0^^$0|@$1|2|3|4|5|6|7|L|8|@]|9|@$A|M|B|N|1|O]]|C|$]]|$1|D|3|-4|5|6|7|P|8|@]|9|@]|C|$]]]|E|$F|$5|G|H|I|C|$J|K]]]]

I think you are going to need to write your own middleware, since ideally (based on a very quick read of <a href="http://www.ietf.org/rfc/rfc2617.txt" rel="nofollow">RFC 2617</a>) when not authenticated you would return a WWW-Authenticate header with both Basic and Digest challenges (with Basic first, for user agents that only understand Basic).

blocks|key|1634223|text|我没有实现，但我想我有办法。您可以使用Plack::Middleware::Conditional“内联”完成此操作。因此，它看起来像这样，但您必须填充缺少的条件/测试。我没有看到一种简单/显而易见的方法，但我怀疑你可能会。由于您有要传递的$env，因此您应该能够按所需的顺序设置/检查HTTP_/session内容，并保留状态以供下一个处理程序知道是否应该启用它。|type|unstyled|depth|inlineStyleRanges|offset|length|style|CODE|entityRanges|data|1634224|use+Plack::Builder;

my+$app+=+sub+{
++++[+200,
++++++[+"Content-Type"+=>+"text/plain"+],
++++++[+"O+HAI,+PLAK!"+]
++++];
};

builder+{
++++enable+"Session::Cookie";
++++enable_if+{+my+$env+=+shift;
++++++++++++++++#+I+don't+know...
++++++++++++}+"Auth::Digest",
++++++++++++++++realm+=>+"Secured",+secret+=>+"BlahBlah",
++++++++++++++++++++authenticator+=>+sub+{+$_[0]+eq+$_[1]+};
++++enable_if+{+my+$env+=+shift;
++++++++++++++++#+I+don't+know...
++++++++++++}+"Auth::Basic",
++++++++++++++++authenticator+=>+sub+{+$_[0]+eq+$_[1]+};
++++$app;
};|code-block|syntax|javascript|1634225|entityMap|0|LINK|mutability|MUTABLE|url|http://search.cpan.org/perldoc?Plack%253a%253aMiddleware%253a%253aConditional^0|3C|4|J|U|0|0|0^^$0|@$1|2|3|4|5|6|7|S|8|@$9|T|A|U|B|C]]|D|@$9|V|A|W|1|X]]|E|$]]|$1|F|3|G|5|H|7|Y|8|@]|D|@]|E|$I|J]]|$1|K|3|-4|5|6|7|Z|8|@]|D|@]|E|$]]]|L|$M|$5|N|O|P|E|$Q|R]]]]

I do not have an implementation but I think I have the approach. You can do this "in-line" with <a href="http://search.cpan.org/perldoc?Plack%3a%3aMiddleware%3a%3aConditional" rel="nofollow">Plack::Middleware::Conditional</a>. So it would look like this but you'll have to fill in the missing conditions/tests. I didn't see an easy/obvious way but I suspect you might. Since you have the <code>$env</code> to pass around you should be able to set/check HTTP_/session stuff in the order you want and keep the state for the next handler to know if it should be enabled or not.

<pre><code>use Plack::Builder;

my $app = sub {
 [ 200,
 [ "Content-Type" =&gt; "text/plain" ],
 [ "O HAI, PLAK!" ]
 ];
};

builder {
 enable "Session::Cookie";
 enable_if { my $env = shift;
 # I don't know...
 } "Auth::Digest",
 realm =&gt; "Secured", secret =&gt; "BlahBlah",
 authenticator =&gt; sub { $_[0] eq $_[1] };
 enable_if { my $env = shift;
 # I don't know...
 } "Auth::Basic",
 authenticator =&gt; sub { $_[0] eq $_[1] };
 $app;
};
</code></pre>

I would like to have my Plack app try several different means of authorizing the user. Specifically, check if the user is already authorized via a session cookie, then check for Digest authentication and then fall back to Basic.

I figured I could just enable a bunch of Auth handlers in the order I wanted them to be checked (Session, Digest, Basic). Unfortunately, the way that <a href="http://search.cpan.org/perldoc?Plack::Middleware::Auth::Digest" rel="noreferrer">Plack::Middleware::Auth::Digest</a> and <a href="http://search.cpan.org/perldoc?Plack::Middleware::Auth::Basic" rel="noreferrer">Plack::Middleware::Auth::Basic</a> are written they both return 401 if digest or basic auth doesn't exist, respectively.

How is this normally dealt with in Plack?

How do I stack Plack authentication handlers?

翻译质量差，导致语言生硬或混乱。

没有提供实际的解决方法或示例。

解答不清晰，无法理解或解决问题。

页面排版不美观，阅读体验差。

文章

问答

视频

学习中心

腾讯云实验室

直播

竞赛

腾讯云代码分析专区

腾讯iOA零信任安全管理系统专区

腾讯云架构师技术同盟交流圈

腾讯云数据库专区

腾讯云顾问专区

腾讯云原生专区

腾讯混元专区

腾讯云TCE专区

腾讯云Lighthouse专区

腾讯云HAI专区

腾讯云Edgeone专区

腾讯云存储专区

腾讯云智能专区

腾讯轻联专区 

腾讯云开发专区

TAPD专区

腾讯轻量云游戏服专区

腾讯云最具价值专家

腾讯云架构师技术同盟

腾讯云创作之星

腾讯云开发者先锋

腾讯云代码助手

云原生构建

TAPD 敏捷项目管理

Cloud Studio

SDK中心

API中心

命令行工具

涵盖代码开发、场景应用、自动测试全流程，助你从零构建专属AI助手

一站式MCP教程库，解锁AI应用新玩法

我想让我的Plack应用程序尝试几种不同的方式来授权用户。具体地说，检查用户是否已经通过会话cookie获得授权，然后检查摘要身份验证，然后回退到Basic。我想我可以按照我想要检查的顺序启用一堆Auth处理程序(Session，Digest，Basic)。不幸的是，如果摘要或基本身份验证不存在，那么和的编写方式都会返...

问如何堆叠Plack身份验证处理程序？
EN

Stack Overflow用户

社区

活动

圈层

关于

腾讯云开发者

热门产品

热门推荐

更多推荐

问如何堆叠Plack身份验证处理程序？EN