slim-basic-auth icon indicating copy to clipboard operation
slim-basic-auth copied to clipboard

PSR-7 and PSR-15 HTTP Basic Authentication Middleware

Results 15 slim-basic-auth issues
Sort by recently updated
recently updated
newest added

Fixes #89 Since getHeaderLine() can return a coma separated string, i add an explode and a foreach. Updated tests to reflect the change

Hi, Getting this error message over an HTTPS connection for a server hosted on Heroku: > Insecure use of middleware over HTTP denied by configuration. > File: /app/vendor/tuupola/slim-basic-auth/src/HttpBasicAuthentication.php > Line:...

Add request object back as parameter to the error handler. ``` $app->add(new Tuupola\Middleware\HttpBasicAuthentication([ "error" => function ($request, $response, $arguments) { ... } ])); ``` See https://github.com/tuupola/branca-middleware/pull/13 for reference.

4.x

Hi, the following configuration: ```php $app->add(new Tuupola\Middleware\HttpBasicAuthentication([ "path" => ["/"], "ignore" => ["/api/unauthorized"], // ... ])); ``` does not work as expected, the requests to `mydomain.com/api.php/api/unauthorized/...` are **still protected** (as...

Hello, I found a bug in the authentification, it may be complicated to reproduce, but i will try to provides as many details as possible. I am using this package...

3.x
4.x

See https://github.com/tuupola/branca-middleware/pull/12 for reference.

3.x
4.x

See https://github.com/tuupola/branca-middleware/pull/16 for reference.

4.x

If a site is proxied through ClaudFlare using the "Flexible" mode (_Encrypts traffic between the browser and Cloudflare_), we will always get the error: "**Insecure use of middleware over HTTP...

How would you pass back a custom error message from a custom authenticator? Obviously my example below is pulled completely out of thin air and would never work, but I...

enhancement
3.x

Adding functionality to allow accessing authenticated user outside of superglobal(s). Currently, the middleware authenticates, but retrieving the authenticated user is still done via $_SERVER["PHP_AUTH_USER"] or $request->getServerParams()["PHP_AUTH_USER"]. There is something unnatural...