tuupola / slim-basic-auth

PSR-7 and PSR-15 HTTP Basic Authentication Middleware
MIT License
440 stars 66 forks source link

Ignore is not working as expected #106

Open seth100 opened 3 years ago

seth100 commented 3 years ago

Hi,

the following configuration:

$app->add(new Tuupola\Middleware\HttpBasicAuthentication([
    "path" => ["/"],
    "ignore" => ["/api/unauthorized"],
    // ...
]));

does not work as expected, the requests to mydomain.com/api.php/api/unauthorized/... are still protected (as all those to mydomain.com/api.php/api/...). While, if I change that to something like:

$app->add(new Tuupola\Middleware\HttpBasicAuthentication([
    "path" => ["/api"],
    "ignore" => ["/api/unauthorized"],
    // ...
]));

all my requests containing mydomain.com/api.php/api/... are not protected.

What am I doing wrong? Is that a know issue (e.g. https://github.com/tuupola/slim-jwt-auth/issues/140)?

Thanks