Android Webview中支持HttpAuth

HttpAuth是什么

• HttpAuth是比较早的http的验证的一个方案
• 认证过程通过http协议来完成

WebView如何支持

• HttpAuth本身是Http协议来支持，在Http的头有标记
• WebView会有回调来方便客户端自己来自定义实现弹出框
• WebView的内部类WebViewClient中的回调方法onReceivedHttpAuthRequest

WebView端实现

• 实现1，从url中根据规则获取用户名密码，自动填充，进行验证
• url中没有用户名密码，实现弹窗，用户输入用户名密码后，根据填充内容进行验证

 @Override
        public void onReceivedHttpAuthRequest(WebView view,
                                              final HttpAuthHandler handler, final String host,
                                              final String realm) {
            String username = null;
            String password = null;

            boolean reuseHttpAuthUsernamePassword = handler
                    .useHttpAuthUsernamePassword();

            if (reuseHttpAuthUsernamePassword && view != null) {
                String[] credentials = view.getHttpAuthUsernamePassword(host,
                        realm);
                if (credentials != null && credentials.length == 2) {
                    username = credentials[0];
                    password = credentials[1];
                }
            }

            if (username != null && password != null) {
                handler.proceed(username, password);
            } else {
                if (isActive()) {
                    showHttpAuthentication(handler, host, realm, null, null,
                            null, 0);
                } else {
                    handler.cancel();
                }

            }
        }

httpAuth测试代码实现

• 使用flask完成最小httpauth原型
• 使用定义好的webview访问flask完成实现
• 参考httpAuth实现片段
• 浏览器上访问http://127.0.0.1:5000 可以弹出对话框说明实现完毕

#!/usr/bin/env python
# coding: utf-8


from functools import wraps
from flask import request, Response, Flask


def check_auth(username, password):
    """This function is called to check if a username /
    password combination is valid.
    """
    return username == 'admin' and password == 'secret'


def authenticate():
    """Sends a 401 response that enables basic auth"""
    return Response(
        'Could not verify your access level for that URL.\n'
        'You have to login with proper credentials', 401,
        {'WWW-Authenticate': 'Basic realm="Login Required"'})


def requires_auth(f):
    @wraps(f)
    def decorated(*args, **kwargs):
        auth = request.authorization
        if not auth or not check_auth(auth.username, auth.password):
            return authenticate()
        return f(*args, **kwargs)
    return decorated


app = Flask(__name__)


@app.route('/secret-page')
@requires_auth
def secret_page():
    return 'secret_page'


if __name__ == '__main__':
    app.run(host="0.0.0.0",debug=True)