summaryrefslogtreecommitdiff
path: root/releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml
diff options
context:
space:
mode:
Diffstat (limited to 'releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml')
-rw-r--r--releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml12
1 files changed, 12 insertions, 0 deletions
diff --git a/releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml b/releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml
new file mode 100644
index 0000000..4394e46
--- /dev/null
+++ b/releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml
@@ -0,0 +1,12 @@
+---
+features:
+ - |
+ Adds a basic http auth middleware as an alternative to noauth in
+ standalone environments. This middleware uses a password file which
+ supports the Apache `htpasswd`_ syntax. This file is read for every
+ request, so no service restart is required when changes are made.
+ The only password digest supported is bcrypt, and the ``bcrypt``
+ python library is used for password checks since it supports ``$2y$``
+ prefixed bcrypt passwords as generated by the Apache htpasswd utility.
+
+ .. _htpasswd: https://httpd.apache.org/docs/current/misc/password_encryptions.html