Basic認証の視覚化 / visualize basic authentication

Transcript

1. #BTJDೝূͷՄࢹԽ P[X
2. લఏ 
   ৽نϓϩδΣΫτ࡞੒࣌
   #"4*$ೝূͰެ։อޢ
   
   ։ൃ࣌
   *%18ͷೖྗ͕໘౗ͳͷͰϒϥ΢βʹอଘ
3. લఏ 
   ϦϦʔε௚લ
   #BTJDೝূΛղআɺͨͩ࢖͍ͬͯΔҙ͕ࣝ ബΕ͍ͯΔͷͰղআΛ๨Εͯ͠·͏͜ͱ ͕͋Δ
4. લఏ 
   ϦϦʔε௚લ
   #BTJDೝূΛղআɺͨͩ࢖͍ͬͯΔҙ͕ࣝ ബΕ͍ͯΔͷͰղআΛ๨Εͯ͠·͏͜ͱ ͕͋Δ 
   #"4*$ೝূΛ࢖͍ͬͯΔ͜ͱΛ

   
   
   
   ๨Εͳ͍Α͏ʹ͍ͨ͠
5. CBTJD@BVUI@NBSL
   HFN
6. CBTJD@BVUI@NBSL
   HFN w#"4*$ೝূ͕ઃఆ͞Ε͍ͯΔͱ(JUIVC
   SJCCPOΛදࣔͯ͘͠ΕΔ(FN
   w3BJMTFOWΛSJCCPOͰදࣔͯ͘͠ΕΔSBDL EFWNBSL
   HFNΛࢀߟʹ࡞੒
7. ࢖͍ํ # Gemfile gem 'basic_auth_mark' $ bundle install
8. ΍͍ͬͯΔ͜ͱ w3BJMT
   BQQىಈ࣌ʹ3BDL
   .JEEMFXBSFʹ CBTJD@BVUI@NBSLΛ௥Ճ
   wSFRVFTU࣌ʹ#"4*$ೝূͷϔομ͕ೖͬͯ ͍ͨΒSJCCPOΛදࣔ
9. 3BDL
   NJEEMFXBSF class Middleware1 def initialize(app) # app == Middleware2 @app = app end def call(env) # Middleware2ͷcall͕ݺ͹ΕΔ. res = @app.call(env) # ඞཁʹԠͯ͡ॲཧΛߦ͏. res end end
10. ྫɿTFOUSZͰͷ࢖ΘΕํ # sentry-raven
 def call(env) # ... begin response = @app.call(env) rescue Error raise # Don't capture Raven errors rescue Exception => e Raven::Rack.capture_exception(e, env) raise end # ... response end
11. CBTJD@BVUI@NBSLͰͷ࢖͍ํ def call(env) status, headers, response = @app.call(env) if basic_auth? # </head> to <link rel="stylesheet" ...></head> # <body> to <body><div class="github-fork-ribbon" ...> new_response = insert_basic_auth_marks(response) # update body size. headers['Content-Length'] = new_response.bytesize.to_s response = [new_response] end [status, headers, response] end
12. #"4*$ೝূͷ൑ఆ 
    SFRVFTU
    IFBEFS
 "VUIPSJ[BUJPO
    #BTJD
    \#BTFFODPEF JEQX ^
    ͜ͷϔομ͕ϦΫΤετʹؚ·Ε͍ͯΔ৔߹
 #"4*$ೝূ͋Γͱ൑ఆ
13. ໰୊ w αʔόʔଆͰ#"4*$ೝূΛ੾ͬͯ΋ΫϥΠΞϯτ ϒϥ΢ β ͸"VUIPSJ[BUJPOϔομΛૹΓଓ͚Δ
    w ࣮ࡍʹ#"4*$ೝূΛ͔ͨ͠Ͳ͏͔͸SBDL
    NJEEMFXBSFʹ ౉Δ৘ใ͔Β͸Θ͔Βͳ͍ ೝূʹ੒ޭͨ͠৔߹ͱೝূ͠ ͳ͔ͬͨ৔߹Ͱม਺͕ಉ͡
    w ͳͷͰɺݱঢ়͸"VUIPSJ[BUJPO
    #BTJDϔομͷ༗ແͷΈͰ ൑ఆ͍ͯ͠Δ αʔόʔͰೝূ੾ͬͨ͋ͱ΋SJCCPO͕දࣔ ͞Εͯ͠·͏
14. ͱΓ͋͑ͣͷ ରԠࡦɹ 
    $ISPNF
 DISPNFSFTUBSU
 DIPSNF͸ϦελʔτͰ#"4*$ೝূͷΩϟογϡ͕ΫϦ Ξ͞ΕΔΑ͏ όʔδϣϯʹΑΔʁ
    
    4BGBSJ
 
 #"4*$ೝূΩϟογϡͷํ๏͕ݟ͚ͭΒΕͣɻɻ
15. ͜Ε͔Β΍Γ͍ͨ͜ͱ w ࠶ىಈ΍ΩϟγϡͷΫϦΞΛ͠ͳͯ͘΋#"4*$ೝূΛ൑ ఆͰ͖ΔΑ͏ʹରԠ
    w ࣾ಺ϓϩμΫτͰͷར༻
16. ͋Γ͕ͱ͏͍͟͝·ͨ͠