4 Commits

Author	SHA1	Message	Date
Kurt Jung	977a3c3226	basicauth: Store name of authenticated user (#1426) ... * Store name of authenticated user in basicauth for use by upstream middleware such as fastcgi and cgi. * Use request context to transfer name of authorized user from basicauth to upstream middleware. Test retrieval of name from context. * Remove development code that was inadvertently left in place * Use keys of type httpserver.CtxKey to access Context values	2017-02-17 15:37:58 -07:00
Matthew Holt	54acb9b2de	basicauth: Remove Authorization header on successful authz (issue #1324) ... If a site owner protects a path with basicauth, no need to use the Authorization header elsewhere upstream, especially since it contains credentials. If this breaks anyone, it means they're double-dipping. It's usually good practice to clear out credentials as soon as they're not needed anymore. (Note that we only clear credentials after they're used, they stay for any other reason.)	2017-01-03 17:47:27 -07:00
Stavros Korokithakis	681c95a749	Add default "Restricted" realm to HTTP Basic auth (#1007) ... * Add default "Restricted" realm to HTTP Basic auth * Add tests for the Basic auth realm	2016-08-07 07:50:36 -06:00
Matthew Holt	416af05a00	Migrating more middleware packages	2016-06-05 21:51:56 -06:00