FEATURE-bauth-conditional-compile: Implementation complete

Add HAVE_BAUTH conditional compilation for basic authentication,
mirroring the existing HAVE_DAUTH pattern. This allows libhttpserver
to build against libmicrohttpd installations that lack basic auth
support.

Changes:
- configure.ac: Auto-detect MHD_queue_basic_auth_fail_response,
  define HAVE_BAUTH flag and AM_CONDITIONAL, add to summary output
- src/httpserver/basic_auth_fail_response.hpp: Guard with #ifdef HAVE_BAUTH
- src/basic_auth_fail_response.cpp: Guard with #ifdef HAVE_BAUTH
- src/httpserver.hpp: Conditionally include basic_auth_fail_response.hpp
- src/httpserver/http_request.hpp: Guard get_user(), get_pass(),
  fetch_user_pass() declarations and username/password cache fields
- src/http_request.cpp: Guard fetch_user_pass(), get_user(), get_pass()
  implementations and basic auth output in operator<<
- src/httpserver/create_webserver.hpp: Guard basic_auth()/no_basic_auth()
  methods and _basic_auth_enabled member
- src/httpserver/webserver.hpp: Guard basic_auth_enabled member
- src/webserver.cpp: Guard basic_auth_enabled initialization
- src/Makefile.am: Make basic_auth_fail_response conditional on HAVE_BAUTH
- examples/Makefile.am: Guard basic_authentication and
  centralized_authentication examples behind HAVE_BAUTH
- test/integ/authentication.cpp: Guard basic auth tests with HAVE_BAUTH
- test/unit/create_webserver_test.cpp: Guard basic_auth builder test

Author: etr

configure.ac

@@ -149,6 +149,11 @@ fi
 AM_CONDITIONAL([COND_CROSS_COMPILE],[test x"$cond_cross_compile" = x"yes"])
 AC_SUBST(COND_CROSS_COMPILE)
 
+# Check for basic auth support in libmicrohttpd
+AC_CHECK_LIB([microhttpd], [MHD_queue_basic_auth_fail_response],
+    [have_bauth="yes"],
+    [have_bauth="no"; AC_MSG_WARN("libmicrohttpd basic auth support not found. Basic auth will be disabled")])
+
 # Check for digest auth support in libmicrohttpd
 AC_CHECK_LIB([microhttpd], [MHD_queue_auth_fail_response],
     [have_dauth="yes"],
@@ -264,6 +269,13 @@ fi
 
 AM_CONDITIONAL([HAVE_GNUTLS],[test x"$have_gnutls" = x"yes"])
 
+if test x"$have_bauth" = x"yes"; then
+    AM_CXXFLAGS="$AM_CXXFLAGS -DHAVE_BAUTH"
+    AM_CFLAGS="$AM_CXXFLAGS -DHAVE_BAUTH"
+fi
+
+AM_CONDITIONAL([HAVE_BAUTH],[test x"$have_bauth" = x"yes"])
+
 if test x"$have_dauth" = x"yes"; then
     AM_CXXFLAGS="$AM_CXXFLAGS -DHAVE_DAUTH"
     AM_CFLAGS="$AM_CXXFLAGS -DHAVE_DAUTH"
@@ -327,6 +339,7 @@ AC_MSG_NOTICE([Configuration Summary:
   License         :  LGPL only
   Debug	          :  ${debugit}
   TLS Enabled     :  ${have_gnutls}
+  Basic Auth      :  ${have_bauth}
   Digest Auth     :  ${have_dauth}
   TCP_FASTOPEN    :  ${is_fastopen_supported}
   Static          :  ${static}

examples/Makefile.am

@@ -19,7 +19,7 @@
 LDADD = $(top_builddir)/src/libhttpserver.la
 AM_CPPFLAGS = -I$(top_srcdir)/src -I$(top_srcdir)/src/httpserver/
 METASOURCES = AUTO
-noinst_PROGRAMS = hello_world service minimal_hello_world custom_error allowing_disallowing_methods handlers hello_with_get_arg args_processing setting_headers custom_access_log basic_authentication minimal_https minimal_file_response minimal_deferred url_registration minimal_ip_ban benchmark_select benchmark_threads benchmark_nodelay deferred_with_accumulator file_upload file_upload_with_callback
+noinst_PROGRAMS = hello_world service minimal_hello_world custom_error allowing_disallowing_methods handlers hello_with_get_arg args_processing setting_headers custom_access_log minimal_https minimal_file_response minimal_deferred url_registration minimal_ip_ban benchmark_select benchmark_threads benchmark_nodelay deferred_with_accumulator file_upload file_upload_with_callback
 
 hello_world_SOURCES = hello_world.cpp
 service_SOURCES = service.cpp
@@ -31,7 +31,6 @@ hello_with_get_arg_SOURCES = hello_with_get_arg.cpp
 args_processing_SOURCES = args_processing.cpp
 setting_headers_SOURCES = setting_headers.cpp
 custom_access_log_SOURCES = custom_access_log.cpp
-basic_authentication_SOURCES = basic_authentication.cpp
 minimal_https_SOURCES = minimal_https.cpp
 minimal_file_response_SOURCES = minimal_file_response.cpp
 minimal_deferred_SOURCES = minimal_deferred.cpp
@@ -44,6 +43,12 @@ benchmark_nodelay_SOURCES = benchmark_nodelay.cpp
 file_upload_SOURCES = file_upload.cpp
 file_upload_with_callback_SOURCES = file_upload_with_callback.cpp
 
+if HAVE_BAUTH
+noinst_PROGRAMS += basic_authentication centralized_authentication
+basic_authentication_SOURCES = basic_authentication.cpp
+centralized_authentication_SOURCES = centralized_authentication.cpp
+endif
+
 if HAVE_GNUTLS
 LDADD += -lgnutls
 noinst_PROGRAMS += minimal_https_psk

src/Makefile.am

@@ -19,9 +19,14 @@
 AM_CPPFLAGS = -I../ -I$(srcdir)/httpserver/
 METASOURCES = AUTO
 lib_LTLIBRARIES = libhttpserver.la
-libhttpserver_la_SOURCES = string_utilities.cpp webserver.cpp http_utils.cpp file_info.cpp http_request.cpp http_response.cpp string_response.cpp basic_auth_fail_response.cpp digest_auth_fail_response.cpp deferred_response.cpp file_response.cpp http_resource.cpp create_webserver.cpp details/http_endpoint.cpp
+libhttpserver_la_SOURCES = string_utilities.cpp webserver.cpp http_utils.cpp file_info.cpp http_request.cpp http_response.cpp string_response.cpp digest_auth_fail_response.cpp deferred_response.cpp file_response.cpp http_resource.cpp create_webserver.cpp details/http_endpoint.cpp
 noinst_HEADERS = httpserver/string_utilities.hpp httpserver/details/modded_request.hpp gettext.h
-nobase_include_HEADERS = httpserver.hpp httpserver/create_webserver.hpp httpserver/webserver.hpp httpserver/http_utils.hpp httpserver/file_info.hpp httpserver/details/http_endpoint.hpp httpserver/http_request.hpp httpserver/http_response.hpp httpserver/http_resource.hpp httpserver/string_response.hpp httpserver/basic_auth_fail_response.hpp httpserver/digest_auth_fail_response.hpp httpserver/deferred_response.hpp httpserver/file_response.hpp httpserver/http_arg_value.hpp
+nobase_include_HEADERS = httpserver.hpp httpserver/create_webserver.hpp httpserver/webserver.hpp httpserver/http_utils.hpp httpserver/file_info.hpp httpserver/details/http_endpoint.hpp httpserver/http_request.hpp httpserver/http_response.hpp httpserver/http_resource.hpp httpserver/string_response.hpp httpserver/digest_auth_fail_response.hpp httpserver/deferred_response.hpp httpserver/file_response.hpp httpserver/http_arg_value.hpp
+
+if HAVE_BAUTH
+libhttpserver_la_SOURCES += basic_auth_fail_response.cpp
+nobase_include_HEADERS += httpserver/basic_auth_fail_response.hpp
+endif
 
 AM_CXXFLAGS += -fPIC -Wall
 

src/basic_auth_fail_response.cpp

@@ -18,6 +18,8 @@
      USA
 */
 
+#ifdef HAVE_BAUTH
+
 #include "httpserver/basic_auth_fail_response.hpp"
 #include <microhttpd.h>
 #include <iosfwd>
@@ -32,3 +34,5 @@ int basic_auth_fail_response::enqueue_response(MHD_Connection* connection, MHD_R
 }
 
 }  // namespace httpserver
+
+#endif  // HAVE_BAUTH

src/http_request.cpp

@@ -310,6 +310,7 @@ MHD_Result http_request::build_request_querystring(void *cls, enum MHD_ValueKind
     return MHD_YES;
 }
 
+#ifdef HAVE_BAUTH
 void http_request::fetch_user_pass() const {
     char* password = nullptr;
     auto* username = MHD_basic_auth_get_username_password(underlying_connection, &password);
@@ -339,6 +340,7 @@ std::string_view http_request::get_pass() const {
     fetch_user_pass();
     return cache->password;
 }
+#endif  // HAVE_BAUTH
 
 #ifdef HAVE_DAUTH
 std::string_view http_request::get_digested_user() const {
@@ -557,8 +559,11 @@ uint16_t http_request::get_requestor_port() const {
 }
 
 std::ostream &operator<< (std::ostream &os, const http_request &r) {
-    os << r.get_method() << " Request [user:\"" << r.get_user() << "\" pass:\"" << r.get_pass() << "\"] path:\""
-       << r.get_path() << "\"" << std::endl;
+    os << r.get_method() << " Request [";
+#ifdef HAVE_BAUTH
+    os << "user:\"" << r.get_user() << "\" pass:\"" << r.get_pass() << "\"";
+#endif  // HAVE_BAUTH
+    os << "] path:\"" << r.get_path() << "\"" << std::endl;
 
     http::dump_header_map(os, "Headers", r.get_headers());
     http::dump_header_map(os, "Footers", r.get_footers());

src/httpserver.hpp

@@ -27,7 +27,9 @@
 
 #define _HTTPSERVER_HPP_INSIDE_
 
+#ifdef HAVE_BAUTH
 #include "httpserver/basic_auth_fail_response.hpp"
+#endif  // HAVE_BAUTH
 #include "httpserver/deferred_response.hpp"
 #ifdef HAVE_DAUTH
 #include "httpserver/digest_auth_fail_response.hpp"

src/httpserver/basic_auth_fail_response.hpp

@@ -25,6 +25,8 @@
 #ifndef SRC_HTTPSERVER_BASIC_AUTH_FAIL_RESPONSE_HPP_
 #define SRC_HTTPSERVER_BASIC_AUTH_FAIL_RESPONSE_HPP_
 
+#ifdef HAVE_BAUTH
+
 #include <string>
 #include "httpserver/http_utils.hpp"
 #include "httpserver/string_response.hpp"
@@ -60,4 +62,7 @@ class basic_auth_fail_response : public string_response {
 };
 
 }  // namespace httpserver
+
+#endif  // HAVE_BAUTH
+
 #endif  // SRC_HTTPSERVER_BASIC_AUTH_FAIL_RESPONSE_HPP_

src/httpserver/create_webserver.hpp

@@ -261,6 +261,7 @@ class create_webserver {
          return *this;
      }
 
+#ifdef HAVE_BAUTH
      create_webserver& basic_auth() {
          _basic_auth_enabled = true;
          return *this;
@@ -270,6 +271,7 @@ class create_webserver {
          _basic_auth_enabled = false;
          return *this;
      }
+#endif  // HAVE_BAUTH
 
      create_webserver& digest_auth() {
          _digest_auth_enabled = true;
@@ -438,7 +440,9 @@ class create_webserver {
      std::string _digest_auth_random = "";
      int _nonce_nc_size = 0;
      http::http_utils::policy_T _default_policy = http::http_utils::ACCEPT;
+#ifdef HAVE_BAUTH
      bool _basic_auth_enabled = true;
+#endif  // HAVE_BAUTH
      bool _digest_auth_enabled = true;
      bool _regex_checking = true;
      bool _ban_system_enabled = true;

src/httpserver/http_request.hpp

@@ -60,11 +60,13 @@ class http_request {
  public:
      static const char EMPTY[];
 
+#ifdef HAVE_BAUTH
      /**
       * Method used to get the username eventually passed through basic authentication.
       * @return string representation of the username.
      **/
      std::string_view get_user() const;
+#endif  // HAVE_BAUTH
 
 #ifdef HAVE_DAUTH
      /**
@@ -74,11 +76,13 @@ class http_request {
      std::string_view get_digested_user() const;
 #endif  // HAVE_DAUTH
 
+#ifdef HAVE_BAUTH
      /**
       * Method used to get the password eventually passed through basic authentication.
       * @return string representation of the password.
      **/
      std::string_view get_pass() const;
+#endif  // HAVE_BAUTH
 
      /**
       * Method used to get the path requested
@@ -380,7 +384,9 @@ class http_request {
 
      static MHD_Result build_request_querystring(void *cls, enum MHD_ValueKind kind, const char *key, const char *value);
 
+#ifdef HAVE_BAUTH
      void fetch_user_pass() const;
+#endif  // HAVE_BAUTH
 
      /**
       * Method used to set an argument value by key.
@@ -485,8 +491,10 @@ class http_request {
      // Others (username, password, digested_user) MHD returns as char* that we need
      // to make a copy of and free anyway.
      struct http_request_data_cache {
+#ifdef HAVE_BAUTH
         std::string username;
         std::string password;
+#endif  // HAVE_BAUTH
         std::string querystring;
         std::string requestor_ip;
 #ifdef HAVE_DAUTH

src/httpserver/webserver.hpp

@@ -168,7 +168,9 @@ class webserver {
      const int nonce_nc_size;
      bool running;
      const http::http_utils::policy_T default_policy;
+#ifdef HAVE_BAUTH
      const bool basic_auth_enabled;
+#endif  // HAVE_BAUTH
      const bool digest_auth_enabled;
      const bool regex_checking;
      const bool ban_system_enabled;