5 Commits

Include renames

Author	SHA1	Message	Date
colinlbc	e8bfa12372	Reworked things to get rid of several pointer errors. ... Implemented svcname paramater for hosts access mode to set daemon name in hosts.allow,hosts.deny. New router config syntax: svcname defaults to uwsgi uwsgi.ini: router access:hosts router access:hosts=svcname router access:allow=addr router access:deny=addr hosts.deny: svcname:ALL	2012-10-25 14:10:37 -07:00
colinlbc	99f584cff0	use char *remote_addr instead of wsgi_req->remote_addr	2012-10-24 03:03:13 -07:00
colinlbc	fc6a79dcc9	corrected hosts_ctl to use STRING_UNKNOWN instead of wsgi_req->host. This ... wants the remote_hostname, not the request host header.	2012-10-24 02:54:30 -07:00
colinlbc	75af812b83	Fixed a couple of silly mistakes in the access:action,host syntax parsing ... Made changes based on unbit feedback: - separated header, body output in 403 error - used uwsgi_concat2n to copy strings out of wsgi_req->remote_addr and wsgi_req->host	2012-10-24 02:15:41 -07:00
Colin Ligertwood	0f4e1eb7e2	A simple access control router using libwrap. Currently only tested on OpenBSD 5.1. ... I've used router_authbasic as a guide to write this. Placeholders exist for an internal ACL scheme. Syntax follows: router = ^/path acces:hosts -- hosts access router using libwrap, works! router = ^/path access:allow,ipaddr -- internal allow, unimplemented router = ^/path access:deny,ipaddr -- internal deny, unimplemented It's just a few hours hacking and I'm not entirely sure how the internal access control will work, but the hosts access stuff works in openbsd. It returns a 403 on denial.	2012-10-24 01:09:44 -07:00