Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[feature] Basic Auth handler #231

Open
stokito opened this issue Jun 23, 2022 · 0 comments
Open

[feature] Basic Auth handler #231

stokito opened this issue Jun 23, 2022 · 0 comments

Comments

@stokito
Copy link

stokito commented Jun 23, 2022

How about to add a basic auth handler? This is still a good option for 90% of APIs.
Unfortunately the golang doesn't provide it out of the box.
This leads to problems because developers starts to write their own which may not be not secure and fast.
Or devs may start to use some auth library which may be configured not properly and again become vulnerable.
Even while there may be a separate libraries for this I think it may be good option to have it in the library so users will have it with less dependencies.

It's questionable how feature rich it should be. I think it must be plain simple and focused on performance. Just as a starter but also because other more feature rich (and slow) libraries exists.
E.g. no password hashing: for API credentials this not needed because you can simply reset credentials.

Alternatives:

If you think that it may be useful to add the basic auth handler then I may rework my version to be more useful but still easy to use and send a PR.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Status: No status
Development

No branches or pull requests

1 participant