HTTP Basic Authorization Header Support

DL6ER · October 29, 2023, 7:45pm

Ready for you to try on a custom branch, details see over there.

github.com/pi-hole/FTL

Add Basic Auth authentication

development-v6 ← new/basic_auth

opened 07:44PM - 29 Oct 23 UTC

DL6ER

+68 -7

# What does this implement/fix? Add ability to create a session using [HTTP B…asic Auth](https://developer.mozilla.org/en-US/docs/Web/HTTP/Authentication#basic_authentication_scheme) ([RFC 7617](https://datatracker.ietf.org/doc/html/rfc7617)). Example: ``` bash $ curl -s 127.0.0.1/api/auth | jq .session.valid false $ curl -s -u pi-hole:ABC 127.0.0.1/api/auth | jq .session.valid true ``` **Related issue or feature (if applicable):** N/A **Pull request in [docs](https://github.com/pi-hole/docs) with documentation (if applicable):** N/A --- **By submitting this pull request, I confirm the following:** 1. I have read and understood the [contributors guide](https://docs.pi-hole.net/guides/github/contributing/), as well as this entire template. I understand which branch to base my commits and Pull Requests against. 2. I have commented my proposed changes within the code. 3. I am willing to help maintain this change if there are issues with it later. 4. It is compatible with the [EUPL 1.2 license](https://opensource.org/licenses/EUPL-1.1) 5. I have squashed any insignificant commits. ([`git rebase`](http://gitready.com/advanced/2009/02/10/squashing-commits-with-rebase.html)) ## Checklist: - [x] The code change is tested and works locally. - [x] I based my code and PRs against the repositories `developmental` branch. - [x] I [signed off](https://docs.pi-hole.net/guides/github/how-to-signoff/) all commits. Pi-hole enforces the [DCO](https://docs.pi-hole.net/guides/github/dco/) for all contributions - [x] I [signed](https://docs.github.com/en/authentication/managing-commit-signature-verification/signing-commits) all my commits. Pi-hole requires signatures to verify authorship - [x] I have read the above and my PR is ready for review.