Mimir push reverse proxy in go
Jump to navigation
Jump to search
```CREATE TABLE users (
username TEXT PRIMARY KEY, password TEXT NOT NULL
);
INSERT INTO users (username, password) VALUES ('admin', 'password123');
<br />
package main
import (
"database/sql" "encoding/base64" "fmt" "io" "log" "net/http" "net/http/httputil" "net/url" "strings"
_ "github.com/mattn/go-sqlite3"
)
// Database connection var db *sql.DB
func main() {
var err error db, err = sql.Open("sqlite3", "./auth.db") if err != nil { log.Fatalf("Failed to open database: %v", err) } defer db.Close()
targetURL := "http://mimir-server:9009" // Change this to your Mimir endpoint
target, err := url.Parse(targetURL)
if err != nil {
log.Fatalf("Invalid target URL: %v", err)
}
proxy := httputil.NewSingleHostReverseProxy(target)
http.HandleFunc("/", func(w http.ResponseWriter, r *http.Request) {
if !authenticate(r) {
http.Error(w, "Unauthorized", http.StatusUnauthorized)
return
}
proxy.ServeHTTP(w, r)
})
log.Println("Reverse proxy running on :8080")
log.Fatal(http.ListenAndServe(":8080", nil))
}
// Authenticate using Basic Auth with SQLite func authenticate(r *http.Request) bool {
authHeader := r.Header.Get("Authorization") if authHeader == "" || !strings.HasPrefix(authHeader, "Basic ") { return false }
decoded, err := base64.StdEncoding.DecodeString(strings.TrimPrefix(authHeader, "Basic "))
if err != nil {
return false
}
parts := strings.SplitN(string(decoded), ":", 2)
if len(parts) != 2 {
return false
}
username, password := parts[0], parts[1]
return validateUser(username, password)
}
// Validate user from SQLite database func validateUser(username, password string) bool {
var storedPassword string err := db.QueryRow("SELECT password FROM users WHERE username = ?", username).Scan(&storedPassword) if err != nil { return false } return password == stor9edPassword
}
<br />
curl -u admin:password123 http://localhost:8080/api/v1/push -d '{}'
```