Restrict access on some locations

If you need a cheap access control but do not want to involve nevisAuth, you can use the following LuaFilter setup, which mimics a simple basic authentication workflow. Be aware that this is not a very secure way of doing access control.

   <filter>
     <filter-name>SetRequestAttributeLuaFilter</filter-name>
     <filter-class>ch::nevis::isiweb4::filter::lua::LuaFilter</filter-class>
     <init-param>
       <param-name>Script.InputHeaderFunctionName</param-name>
       <param-value>inputHeader</param-value>
     </init-param>
     <init-param>
       <param-name>Script</param-name>
       <param-value>
       local store = { ["cli:foo"] = true, ["vinc:bar"] = true }
       local function try(f, catch)
                         local status, exception = pcall(f)
                         if not status then
                         catch(exception)
                        end
               end
 
                         local function send401(resp)
                                  resp:setHeader("WWW-Authenticate", "Basic realm=\"User Visible Realm\"")
                                  resp:send(401)
                         end
 
                         local base64 = nevis.crypto.base64.new()
                         function inputHeader(req, resp)
                                  local auth =
 req:getHeader("Authorization");
                                  if auth then
                                   local plainCred
                                   string.gsub(auth, "Basic (.*)",
function(cred)
                                            try(function()
                                                plainCred = base64:decode(cred)
                                            end, function(e)
                                                send401(resp)
                                            end)
                                   end)
                                   if not store[plainCred] then
                                       send401(resp)
                                   end
                                  else
                                   send401(resp)
                                  end
                         end
                </param-value>
         </init-param>
</filter>