<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<meta content="text/html; charset=UTF-8">
<style type="text/css" style="">
<!--
p
{margin-top:0;
margin-bottom:0}
-->
</style>
<div dir="ltr">
<div id="x_divtagdefaultwrapper" dir="ltr" style="font-size:12pt; color:#000000; font-family:Calibri,Arial,Helvetica,sans-serif">
<p>Sorry for late reply.</p>
<p>I have find a suitable solution for validation through a http web service. Here tells developing custom helper even using php: <a href="http://freesoftwaremagazine.com/articles/authentication_with_squid/" class="x_OWAAutoLink">http://freesoftwaremagazine.com/articles/authentication_with_squid/</a> That's
nice. </p>
<p><br>
</p>
<p>Then I know there is authentication with oauth2 for squid-server. But you may be know, in oauth2 authentication, you must authorize the app using user's credentials e.g. facebook username and password. When this oauth2 method is used, your app must redirect
to the oauth2 service to authorize your app. </p>
<p><br>
</p>
<p>You may had used many web sites like that with facebook login. So my question is how may squid server do this redirect and authorization process using a third party oauth2 service? Squid asks username and password with web browser popup. Is there any example
to this? </p>
<p><br>
</p>
<p>Regards,</p>
<p>Serhat.</p>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Eliezer Croitoru <eliezer@ngtech.co.il><br>
<b>Sent:</b> Wednesday, March 15, 2017 12:01:15 PM<br>
<b>To:</b> 'Serhat Koroglu'<br>
<b>Cc:</b> squid-users@lists.squid-cache.org<br>
<b>Subject:</b> RE: [squid-users] Squid Authentication with HTTP REST API</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Hey Serhat,(first name right?)<br>
<br>
>From what I understand you have a specific case.<br>
Today the squid project doesn't have an example on how to implement such a solution.<br>
I am willing to write an example for such a use case.<br>
If you are willing to give me some of the details privately I would be able to put up together an ICAP server as an example.<br>
<br>
Eliezer<br>
<br>
----<br>
Eliezer Croitoru<br>
Linux System Administrator<br>
Mobile: +972-5-28704261<br>
Email: eliezer@ngtech.co.il<br>
<br>
<br>
-----Original Message-----<br>
From: squid-users [<a href="mailto:squid-users-bounces@lists.squid-cache.org">mailto:squid-users-bounces@lists.squid-cache.org</a>] On Behalf Of Amos Jeffries<br>
Sent: Wednesday, March 15, 2017 4:04 AM<br>
To: squid-users@lists.squid-cache.org<br>
Subject: Re: [squid-users] Squid Authentication with HTTP REST API<br>
<br>
On 14/03/2017 8:15 p.m., Serhat Koroglu wrote:<br>
> Hello,<br>
> <br>
> Is there any possibilty implementing an authentication through a custom XML Web Service or HTTP REST API? What should I check?<br>
> <br>
<br>
Squid supports the HTTP authentication framework (RFC 7235<br>
<<a href="https://tools.ietf.org/html/rfc7235">https://tools.ietf.org/html/rfc7235</a>>). Squid is intentionally designed<br>
not to touch the message payloads.<br>
<br>
If the API uses custom headers then you can possibly do it with an<br>
external_acl_type helper that takes those headers and returns<br>
credentials to Squid.<br>
<br>
But, if the API uses message payloads you will likely need something<br>
like an ICAP service or eCAP module to do the payload processing.<br>
<br>
<br>
Amos<br>
<br>
_______________________________________________<br>
squid-users mailing list<br>
squid-users@lists.squid-cache.org<br>
<a href="http://lists.squid-cache.org/listinfo/squid-users">http://lists.squid-cache.org/listinfo/squid-users</a><br>
<br>
</div>
</span></font>
</body>
</html>