ktorio / ktor

Framework for quickly creating connected applications in Kotlin with minimal effort
https://ktor.io
Apache License 2.0
13.09k stars 1.07k forks source link

More control to response headers #1432

Open DonKeyHot1 opened 5 years ago

DonKeyHot1 commented 5 years ago

Subsystem Server. Authentication feature.

Is your feature request related to a problem? Please describe. I'm implementing basic authentication. When wrong username/password pair is send to the server, server responds with code 401 and WWW-Authenticate header. The problem is that in chromium-based browsers it leads to native username/password prompt appear. This is also described here

Describe the solution you'd like I'd like to intercept authentication AFTER all AuthenticationPipeline.RequestAuthentication interceptions is finished. Inside that interceptions i'd like remove headers. (Now I'm only allowed to add headers)

Motivation to include to ktor This feature will give more control to all possible flows including authentication flow

oleg-larshin commented 4 years ago

Please check the following ticket on YouTrack for follow-ups to this issue. GitHub issues will be closed in the coming weeks.

PatrykKleczkowski commented 2 years ago

Hello, What is the status of this issue? Is it related with changes in https://github.com/ktorio/ktor/commit/a9e4f12bdf071c28ca8c7b7648103be8b6817081 ?

When it will be released and ready to use?

Regards

pklimai commented 2 years ago

Any update on this, please?