Basic authentication plugin
Lead Maintainer: Matt Harrison
Basic authentication requires validating a username and password combination. The
'basic' scheme takes the following options:
validateFunc- (required) a user lookup and password validation function with the signature
function(request, username, password, callback)where:
request- is the hapi request object of the request which is being authenticated.
username- the username received from the client.
password- the password received from the client.
callback- a callback function with the signature
function(err, isValid, credentials)where:
err- an internal error.
trueif both the username was found and the password matched, otherwise
credentials- a credentials object passed back to the application in
credentialsare only included when
true, but there are cases when the application needs to know who tried to authenticate even when it fails (e.g. with authentication mode
allowEmptyUsername- (optional) if
true, allows making requests with an empty username. Defaults to
unauthorizedAttributes- (optional) if set, passed directly to Boom.unauthorized. Useful for setting realm attribute in WWW-Authenticate header. Defaults to
const Bcrypt = require'bcrypt';const users =john:username: 'john'password: '$2a$10$iqJSHD.BGr0E2IxQwYgJmeP3NvhPrXAeLSaGCj6IR/XU5QtjVu5Tm' // 'secret'name: 'John Doe'id: '2133d32a';constconst user = usersusername;if !userreturn callbacknull false;Bcryptcomparepassword userpassword err isValid =>callbackerr isValid id: userid name: username ;;;serverregisterrequire'hapi-auth-basic' err =>serverauthstrategy'simple' 'basic' validateFunc: validate ;serverroute method: 'GET' path: '/' config: auth: 'simple' ;;