root/xcap/tweaks.py

import md5

from twisted.cred import credentials, error
from twisted.web2.auth.digest import IUsernameDigestHash

from zope.interface import implements

def makeHash(username, realm, password):
    s = '%s:%s:%s' % (username, realm, password)
    return md5.new(s).hexdigest()

class BasicCredentials(credentials.UsernamePassword):
    """Custom Basic Credentials, which support both plain and hashed checks."""

    implements(credentials.IUsernamePassword, IUsernameDigestHash)

    def __init__(self, username, password, realm):
        self.username = username
        self.password = password
        self.realm = realm

    def checkHash(self, digestHash):
        return digestHash == makeHash(self.username, self.realm, self.password)


def decode(self, response, request):
    try:
        creds = (response + '===').decode('base64')
    except Exception:
        raise error.LoginFailed('Invalid credentials')

    creds = creds.split(':', 1)
    if len(creds) == 2:
        creds = BasicCredentials(creds[0], creds[1], self.realm) # our change
        return creds
    else:
        raise error.LoginFailed('Invalid credentials')

def tweak_BasicCredentialFactory():
    import new
    from twisted.web2.auth.basic import BasicCredentialFactory
    method = new.instancemethod(decode, None, BasicCredentialFactory)
    BasicCredentialFactory.decode = method