Open M1cha opened 2 years ago
Shouldn't the rest-server also extract the username from the client certificate similar to #191? Or is the idea to only use the client certificate to allow access to the rest-server and then require an additional htpasswd verification (I'm not particularly sure how useful that is)?
@MichaelEischer IMO, what you request should be optional. I use TLS with my own CA to prevent anyone inside my home network from using the rest server. I need neither htaccess nor TLS username verification though since I'm the only user.
What is the purpose of this change? What does it change?
Add support for authenticating clients using a CA certificate.
Was the change discussed in an issue or in the forum before?
Closes #73
Checklist
changelog/unreleased/
that describes the changes for our users (template here)gofmt
on the code in all commits