Questions tagged [basic-authentication]

Basic authentication is a method for a web browser or other client program to provide a user name and password when making a request.

Basic authentication was introduced with RFC1945 (HTTP/1.0) and is historically the first mechanism for authenticating at the HTTP layer level. Relying on base64 encoding, it is considered from the beginning as weak and unsecure, but it has a legitimate use on trusted connections (either on encrypted tunnels such as SSL, or unencrypted on a closed network).

Mechanism description :

When challenged by an HTTP server sending a WWW-Authenticate header with a realm challenge, the HTTP client must send a new request including an Authorization header containing the user's credentials encoded in base64.

The user credentials can be stored on the HTTP server itself, or on a remote system such as LDAP.

3320 questions
1
vote
1 answer

Security Dialogflow fulfillment request headers

This is a follow up on Security Dialogflow fulfillment thread. the answer there explore the req.headers.authorization you will find an authentication variable (concat these three things: Your dialogflow username The character ':' Your…
Jimmy
  • 37
  • 4
1
vote
1 answer

Use basic and jwt authentication in different routes with Adonis JS

I am developing an app with Adonis JS and I have a problem with authentication. I intend to use two authentication schemes for this app: basic and jwt. Set the authenticator field with jwt in the auth.js file 'use strict' module.exports = { /* …
1
vote
2 answers

fetch - pass original authentication header

Really simple question but I couldn't find anything anywhere about this. I'm trying to make a fetch request with the original authentication header. My app is using http basic authentication for all routes which works fine. with my clientside js I'm…
SnelleJelle
  • 933
  • 5
  • 18
  • 35
1
vote
0 answers

Authorization Required error while trying to list hotels.

I'm affiliate to booking.com then I want to use Booking API docs here. The request which I'm using is this: GET https://distribution-xml.booking.com/2.0/json/hotels?hotel_ids=10004 I have used basic authentication in my request headers But I am…
1
vote
1 answer
1
vote
0 answers

Basicauth setup on Elasticsearch 6 dot release

I am trying to test few plugins related to user access for test user (custom access based doc filtering) on ES and I need to have basic auth to validate it. Is there a user manual for setting up basic auth setup at elasticsearch (6 dot release) at…
1
vote
1 answer

CherryPy allways decodes Basic Auth with ISO-8859-1

Is there a way to configure cherrypy to correctly decode utf-8 encoded authentication strings? Update It's know limitation documented in issue #1680. Until the issue is resolved, CherryPy will not recognize UTF-8 encoded Basic-Auth Data. Original…
MadMike
  • 1,391
  • 1
  • 16
  • 38
1
vote
1 answer

How to send SOAP request with username and password like in SOAP UI using java

Sorry if this question is duplicated, but I tried a couple of solutions in StackOverflow and still get issue with sending SOAP request. My current situation is my java application needs to send SOAP request to my customer web service, which I did…
keduadoi
  • 171
  • 1
  • 2
  • 17
1
vote
2 answers

How to use BasicAuth with ElasticSearch Connector on Flink

I want to use the elastic producer on flink but I have some trouble for authentification: I have Nginx in front of my elastic search cluster, and I use basic auth in nginx. But with the elastic search connector I can't add the basic auth in my url…
1
vote
1 answer

PHP Authorization header not found

I am working on the codeigniter basic authentication by using Rest_controller. Currently i having the issue on getting anyone of them in the list below from my $_SERVER array…
alex
  • 11
  • 4
1
vote
0 answers

Include authorization header using fetch API POST method

Possibly I'm still not completely understanding all the ins and outs of browser security, but i think what I'm trying to achieve is relatively simple. I have a page served 100% over HTTPS, I'm using basic auth, with the username & password being…
1
vote
1 answer

Silverstripe BasicAuth::protect_entire_site loops on Plesk Server

We have moved some Silverstripe websites from AWS to a Plesk environment (requested by client). One of the sites is a test website protected by this code: BasicAuth::protect_entire_site(true, 'ACCESS_TEST_SITE'); Visiting the test website in the…
BaronGrivet
  • 4,364
  • 5
  • 37
  • 52
1
vote
0 answers

Is it possible to utilise multiple HTTP basic authorisation usernames on the same site?

I'm working on a basic system that sits behind an HTTP basic auth username/password. The client would like certain actions only to be performed by a certain type of user. I could create a whole login system in PHP, but would prefer to keep it…
Codemonkey
  • 4,455
  • 5
  • 44
  • 76
1
vote
3 answers

Access username from basic authentication

I have a MVC project with uses Identity. This enables users to sign up to the site and create a profile. I have a separate WebAPI class to allow Embedded GSM devices to communicate with the server. Users are able to sign up and add many GSM units to…
A Houghton
  • 372
  • 5
  • 18
1
vote
1 answer

file_get_contents with HTTP Basic Authorization based on the network connection

I am using the file_get_contents() with HTTP basic Authorization to get the content from my $url: $url = "http://example.com"; $cred = sprintf('Authorization: Basic %s', base64_encode('username:password')); $opts = array( 'http' => array( …
1 2 3
99
100