Basic Auth

El middleware Basic Auth proporciona autenticación HTTP basic.

Para credenciales válidas llama al siguiente handler.
Para credenciales ausentes o inválidas, envía una response 401 Unauthorized.

Todo el middleware principal reside en el paquete middleware:

import "github.com/labstack/echo/v5/middleware"

Uso

e.Use(middleware.BasicAuth(func(c *echo.Context, username, password string) (bool, error) {
  // Use a constant time comparison to prevent timing attacks.
  if subtle.ConstantTimeCompare([]byte(username), []byte("joe")) == 1 &&
    subtle.ConstantTimeCompare([]byte(password), []byte("secret")) == 1 {
    return true, nil
  }
  return false, nil
}))

Configuración personalizada

e.Use(middleware.BasicAuthWithConfig(middleware.BasicAuthConfig{}))

Configuración

BasicAuthConfig · github.com/labstack/echo/v5@5196b9b

Las descripciones de los campos se generan a partir de comentarios del código fuente en inglés.

Campos del código fuente
Campo	Tipo	Descripción	Fuente
`Skipper`	`Skipper`	Skipper defines a function to skip middleware.	L23
`Validator`	`BasicAuthValidator`	Validator is a function to validate BasicAuthWithConfig credentials. Note: if request contains multiple basic auth headers this function would be called once for each header until first valid result is returned Required.	L28
`Realm`	`string`	Realm is a string to define realm attribute of BasicAuthWithConfig. Default value "Restricted".	L32
`AllowedCheckLimit`	`uint`	AllowedCheckLimit set how many headers are allowed to be checked. This is useful environments like corporate test environments with application proxies restricting access to environment with their own auth scheme. Defaults to 1.	L38

Funciones del código fuente
Tipo	Fuente
`func BasicAuth(fn BasicAuthValidator) echo.MiddlewareFunc`	L87
`func BasicAuthWithConfig(config BasicAuthConfig) echo.MiddlewareFunc`	L92

Validator tiene esta firma:

type BasicAuthValidator func(c *echo.Context, user string, password string) (bool, error)

Configuración por defecto

// Effective defaults applied when fields are left unset.
BasicAuthConfig{
  Skipper: DefaultSkipper,
  Realm:   "Restricted",
}