Hapi Auth Basic implementation (can we simplify this...?) #52
Labels
discuss
Share your constructive thoughts on how to make progress with this issue
enhancement
New feature or enhancement of existing functionality
help wanted
If you can help make progress with this issue, please comment!
investigate
I'm not a fan of how hapi-auth-basic
requires username & password to be sent to the server as:
i.e. the front-end app has to base64 encode the un+:+pw and send it in the auth header.
see: http://git.io/xdjk
I would propose we _fork_ the module and create a second option:
Thereby allowing people to send the authentication POST request to /login with either the auth header _or_ a form payload.
The text was updated successfully, but these errors were encountered: