[](https://travis-ci.org/ondrap/gssapi-wai) [](https://hackage.haskell.org/package/gssapi-wai)
## GSSAPI and Kerberos bindings for Haskell
See haskell [gssapi](http://github.com/ondrap/gssapi) package
for tutorial how to set up kerberos authentication with Windows AD.
This module is modelled after [spnego-http-auth-nginx-module](https://github.com/stnoonan/spnego-http-auth-nginx-module).
If you are using it to provide auth, it should be reasonably easy to use this module instead.
#### The application
Generally you need to use TLS, otherwise browsers refuse to use SPNEGO authentication.
The library provides wai middleware component to ease use. The username is saved
to a vault.
````haskell
{-# LANGUAGE OverloadedStrings #-}
module Main where
import Data.ByteString.Lazy.Char8 (fromStrict)
import Data.Function ((&))
import Data.Maybe (fromMaybe)
import Data.Monoid ((<>))
import qualified Data.Vault.Lazy as V
import Network.HTTP.Types (status200)
import Network.HTTP.Types.Header (hContentType)
import Network.Wai (Application, responseLBS,
vault)
import Network.Wai.Handler.Warp (defaultSettings, setPort)
import Network.Wai.Handler.WarpTLS (runTLS, tlsSettings)
import Network.Wai.Middleware.SpnegoAuth
app :: Application
app req respond = do
let user = fromMaybe "no-user-found?" (V.lookup spnegoAuthKey (vault req))
respond $ responseLBS status200 [(hContentType, "text/plain")] ("Hello " <> fromStrict user)
main :: IO ()
main = do
let port = 3000
settings = defaultSettings & setPort port
tsettings = tlsSettings "cert.pem" "key.pem"
authSettings = defaultSpnegoSettings{spnegoRealm=Just "EXAMPLE.COM"}
putStrLn $ "Listening on port " ++ show port
runTLS tsettings settings (spnegoAuth authSettings app)
````