Refactor InfluxDB listener (#6974)

Use streaming parser in InfluxDB listener

internal/http.go

@@ -6,27 +6,27 @@ import (
 	"net/http"
 )
 
-// ErrorFunc is a callback for writing an error response.
-type ErrorFunc func(rw http.ResponseWriter, code int)
+type BasicAuthErrorFunc func(rw http.ResponseWriter)
 
 // AuthHandler returns a http handler that requires HTTP basic auth
 // credentials to match the given username and password.
-func AuthHandler(username, password string, onError ErrorFunc) func(h http.Handler) http.Handler {
+func AuthHandler(username, password, realm string, onError BasicAuthErrorFunc) func(h http.Handler) http.Handler {
 	return func(h http.Handler) http.Handler {
 		return &basicAuthHandler{
 			username: username,
 			password: password,
+			realm:    realm,
 			onError:  onError,
 			next:     h,
 		}
 	}
-
 }
 
 type basicAuthHandler struct {
 	username string
 	password string
-	onError  ErrorFunc
+	realm    string
+	onError  BasicAuthErrorFunc
 	next     http.Handler
 }
 
@@ -37,7 +37,9 @@ func (h *basicAuthHandler) ServeHTTP(rw http.ResponseWriter, req *http.Request)
 			subtle.ConstantTimeCompare([]byte(reqUsername), []byte(h.username)) != 1 ||
 			subtle.ConstantTimeCompare([]byte(reqPassword), []byte(h.password)) != 1 {
 
-			h.onError(rw, http.StatusUnauthorized)
+			rw.Header().Set("WWW-Authenticate", "Basic realm=\""+h.realm+"\"")
+			h.onError(rw)
+			http.Error(rw, http.StatusText(http.StatusUnauthorized), http.StatusUnauthorized)
 			return
 		}
 	}
@@ -45,6 +47,9 @@ func (h *basicAuthHandler) ServeHTTP(rw http.ResponseWriter, req *http.Request)
 	h.next.ServeHTTP(rw, req)
 }
 
+// ErrorFunc is a callback for writing an error response.
+type ErrorFunc func(rw http.ResponseWriter, code int)
+
 // IPRangeHandler returns a http handler that requires the remote address to be
 // in the specified network.
 func IPRangeHandler(network []*net.IPNet, onError ErrorFunc) func(h http.Handler) http.Handler {