search

jshttp / basic-auth

Generic basic auth Authorization header field parser
MIT License
702 stars 86 forks source link

Passing basic http credentials in URI #35

Closed SanzSeraph closed 6 years ago

SanzSeraph commented 6 years ago

This isn't so much an issue as it is a feature request. My understanding is that the basic HTTP authentication scheme allows for usernames and passwords to be sent in the URI like so:

https://username:password@host.example.com

Was it a deliberate decision to leave this feature out? It can be very helpful when trying to test authentication, because you can send requests through your browser and see the results without having to modify headers.

SanzSeraph commented 6 years ago

Sorry, this is the wrong github repository. I meant to post this in the express-basic-auth repository. Please ignore.

dougwilson commented 6 years ago

You can always close the issue and I don't want to just close it on you. Are you asking for the issue to be closed or something else?

SanzSeraph commented 6 years ago

It can be closed. Upon doing some more research, I have discovered that this method of passing basic HTTP credentials is falling out of favor with the major browsers and support has been dropped for some time. Chrome 56, which is what I'm currently using, is stripping out the credentials before it even sends the requests, so it wouldn't do any good to add support in express-basic-auth.