PYTHON实现HTTP基本认证（BASIC AUTHENTICATION）

浏览数：37 / 时间：2015年06月08日

参考：

http://www.voidspace.org.uk/python/articles/authentication.shtml#id20
http://zh.wikipedia.org/wiki/HTTP%E5%9F%BA%E6%9C%AC%E8%AE%A4%E8%AF%81

#! /usr/bin/env python
# -*-coding:utf-8-*-

import re
import sys
import base64
import urllib2

class BasicAuth:
    def __init__(self, username, password, realm=‘‘):
        base_str = "%s:%s" % (username,password)
        base_str = "Basic " + base64.encodestring(base_str)[:-1]
        self.authline = base_str    
        self.realm = realm
        #print self.authline

    def visit(self, the_url):
        req = urllib2.Request(the_url)
        try:
            content = urllib2.urlopen(req)
        except IOError,e:
            #here we *want* fail
            pass
        else:
            print "This page isn‘t protected by authentication."
            sys.exit(1)

        if not hasattr(e, ‘code‘) or e.code != 401:
            #we got an error - but not a 401 error
            print "This page isn‘t protected by authentication."
            print ‘But we fail for another reason‘
            sys.exit(1)

        authline = e.headers[‘www-authenticate‘]
        print authline
　　　　 #print e.headers
        authobj = re.compile( r‘‘‘(?:\s*www-authenticate\s*:)?\s*(\w*)\s+realm=[‘"]([^‘"]+)[‘"]‘‘‘,re.IGNORECASE)
        matchobj = authobj.match(authline)
        if not matchobj:
            print ‘The authentication header is badly formed.‘
            print authline
            sys.exit(1)
        scheme = matchobj.group(1)
        realm = matchobj.group(2)
        if scheme.lower() != ‘basic‘:
            print ‘This example only work with BASIC authentication.‘
            sys.exit(1)

        req.add_header("Authorization", self.authline)
        try:
            handle = urllib2.urlopen(req)
        except IOError,e:
            print "It looks like the username or password is wrong."
            sys.exit(1)
        thepage = handle.read()
        return thepage

if __name__ == "__main__":
    ba = BasicAuth(‘admin‘, ‘admin‘)
    content = ba.visit("http://192.168.1.1/images/logo.jpg")　　　　#路由器管理页面通常采用基本认证法进行身份认证
    with open(‘logo.jpg‘, ‘w‘) as f:
        f.write(content)