Skip to content

Auth basic

m4dz requested to merge m4dz/kresus:auth-basic into master

This merge request adds an Auth Basic process.

It relies on a KRESUS_AUTH environment variable (or config key), in the form of username:passwd. If the key isn't provided (aka falsy), the auth-basic middleware isn't enabled, and you get a full access to Kresus without auth. If the key is provided with a username and a password separated by a semicolon, the auth-basic middleware is enabled with a challenge mode activated, allowing the browser to ask for credentials before giving access to the app.

The merge request is based on the 0.15.2 tag, let me know if you need me to rebase it on the master (but it seems that the master is currently in WIP for multi-users supports, so I'm not sure).

Thanks!

Merge request reports