search

sentriz / gonic

music streaming server / free-software subsonic server API implementation
ircs://irc.libera.chat/#gonic
GNU General Public License v3.0
1.54k stars 111 forks source link

Support for basic HTTP authentication? #359

Open fletchowns opened 1 year ago

fletchowns commented 1 year ago

Subsonic has an undocumented feature where if you have basic HTTP authentication that uses the same credentials as the subsonic user, it effectively replaces the built in authentication.

I prefer using this with Subsonic since it makes it easy to hook into fail2ban to prevent brute force attacks. DSub has support for this, see https://github.com/memen45/SubMusic/issues/46 for some additional details where support for it was added to a Subsonic app for Garmin watches.

I was searching around and didn't see any mention of basic HTTP authentication for gonic. Is that something that could be supported? How are others preventing brute force logic attacks against their gonic servers?

bensmith2697 commented 11 months ago

@sentriz is this something that is going to be added? I too would like to use this functionality.

sentriz commented 11 months ago

PRs welcome!

bensmith2697 commented 11 months ago

I totally understand. I wish I could. I don't know Go though, I only know JavaScript/Node. 😅