[FEATURE] Add HTTP basic authentication support through Sec-WebSocket-Protocol header to UIClient on the web ui

SAP / e-mobility-charging-stations-simulator

OCPP-J charging stations simulator

Apache License 2.0

130 stars 53 forks source link

[FEATURE] Add HTTP basic authentication support through Sec-WebSocket-Protocol header to UIClient on the web ui #980

Closed jerome-benoit closed 7 months ago

jerome-benoit commented 7 months ago

Duplicate issue

[X] I've searched for any related issues and avoided creating a duplicate issue.

Description

[x] Move configuration from TS to JSON syntax
[x] JSON configuration file must be a template only
[x] The authentication configuration syntax shall follow the one used on the simulator for uiServer configuration section
[x] Client and server side HTTP basic auth hack through Sec-WebSocket-Protocol header

Attachments

No response

jerome-benoit commented 7 months ago

WebSocket class in browsers JS engine is very unlikely to support HTTP basic authentication. Either add another authentication scheme support on UI Server and Web UI such as a PSK in HTTP headers Bearer field, either find a way to make HTTP basic authentication scheme works on all browsers with workaround such as building the headers by hand on all requests.

jerome-benoit commented 7 months ago

WebSocket class in browsers JS engine is very unlikely to support HTTP basic authentication. Either add another authentication scheme support on UI Server and Web UI such as a PSK in HTTP headers Bearer field, either find a way to make HTTP basic authentication scheme works on all browsers with workaround such as building the headers by hand on all requests.

https://ably.com/blog/websocket-authentication -> implement the Sec-WebSocket-Protocol header hack