Add HTTP basic Auth support #2

Open xwolf opened this issue on 6 Mar 2015 - 0 comments

@xwolf xwolf commented on 6 Mar 2015

Create a loginauth module HTTPBasicAuth for HTTP basic authentication (Header param).

Server side:
When the server wants the user agent to authenticate itself towards the server, it can send a request for authentication.

WWW-Authenticate: Basic realm="myRealm"
Whereas Basic is the scheme and the remainder is very much dependent on that scheme. In this case realm just provides the browser a literal that can be displayed to the user when prompting for the user id and password.

Client side:
When the user agent wants to send the server authentication credentials it may use the Authorization header.

1) Username and password are combined into a string "username:password"
2) The resulting string is then encoded using the RFC2045-MIME variant of Base64, except not limited to 76 char/line[9]
3) The authorization method and a space i.e. "Basic " is then put before the encoded string.
For example, if the user agent uses 'Aladdin' as the username and 'open sesame' as the password then the header is formed as follows:

Authorization: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==

Labels

Priority
No priority
Milestone
0.9
Assignee

1 participant
@xwolf