summaryrefslogtreecommitdiff
path: root/releasenotes/notes/basic-auth-middleware-5f812399e325425f.yaml
blob: 4394e465f52231a16b13447f4f3aed4ece4393dc (plain)
1
2
3
4
5
6
7
8
9
10
11
12
---
features:
  - |
    Adds a basic http auth middleware as an alternative to noauth in
    standalone environments. This middleware uses a password file which
    supports the Apache `htpasswd`_ syntax. This file is read for every
    request, so no service restart is required when changes are made.
    The only password digest supported is bcrypt, and the ``bcrypt``
    python library is used for password checks since it supports ``$2y$``
    prefixed bcrypt passwords as generated by the Apache htpasswd utility.

    .. _htpasswd: https://httpd.apache.org/docs/current/misc/password_encryptions.html