Basic authentication plugin
Lead Maintainer: Eran Hammer
Basic authentication requires validating a username and password combination. The
'basic' scheme takes the following options:
validateFunc- (required) a user lookup and password validation function with the signature
function(username, password, callback)where:
username- the username received from the client.
password- the password received from the client.
callback- a callback function with the signature
function(err, isValid, credentials)where:
err- an internal error.
trueif both the username was found and the password matched, otherwise
credentials- a credentials object passed back to the application in
credentialsare only included when
true, but there are cases when the application needs to know who tried to authenticate even when it fails (e.g. with authentication mode
allowEmptyUsername- (optional) if
true, allows making requests with an empty username. Defaults to
var Bcrypt = require'bcrypt';var users =john:username: 'john'password: '$2a$10$iqJSHD.BGr0E2IxQwYgJmeP3NvhPrXAeLSaGCj6IR/XU5QtjVu5Tm' // 'secret'name: 'John Doe'id: '2133d32a';varvar user = usersusername;if !userreturn callbacknull false;Bcryptcomparepassword userpasswordcallbackerr isValid id: userid name: username ;;;serverregisterrequire'hapi-auth-basic'serverauthstrategy'simple' 'basic' validateFunc: validate ;serverroute method: 'GET' path: '/' config: auth: 'simple' ;;