Http Basic Authentication

[Abhilash Krishnan]

Does anyone have an example of Http Server using Http Basic Authentication?

[Tim Fox]

There are some pretty complete code examples in the vertx-web docs, and tests in the vertx-web test suite.

There's also a vertx-web example for redirect auth (which is slightly more complex)

On 08/07/15 18:01, Abhilash Krishnan wrote:

Does anyone have an example of Http Server using Http Basic Authentication?

--
You received this message because you are subscribed to the Google Groups "vert.x" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vertx+un...@googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

[Abhilash Krishnan]

I checked the vertx-web docs. I am uanble to find complete example for Http Basic Authentication.

[Tim Fox]

There are complete examples in the test suite

[Abhilash Krishnan]

Hi,

I am unable to find the git repository for test suite. Can you please share the link?

[Arnaud Estève]

https://github.com/vert-x3/vertx-web/blob/master/src/test/java/io/vertx/ext/web/handler/BasicAuthHandlerTest.java

[Abhilash Krishnan]

I am using Apache Shiro to authenticate the user. 

                Realm realm = new ShiroRealm();

AuthProvider authProvider = ShiroAuth.create(vertx, realm);

                router.route("/*").handler(BasicAuthHandler.create(authProvider));

router.get("/groups/:groupId").handler(routingContext -> {

boolean isAuthenticated = routingContext.user() != null;

log.info("isAuth? "+isAuthenticated);

});

But when I invoke the connection from Jersey client, it is giving connection refused. How does the authentication happen here?

[Paulo Lopes]

The way HTTP Basic auth works is as follows:

-> a request is done to a protected resource
<- server responds with 401 and header "WWW-Authenticate"
-> web browser popup shows asking for credentials and new request is done and authorized

Now i think your Jersey client is making a request and gets the 401 so it stops.

If you want it to continue you need to add the header "Authorization" to your request with "username:password" base64 encoded and it should work