hassox/warden — Issue #32: Basic Auth and Password Strategies
Author: jamiehodge
Created: 2011-11-03 21:50:34+00:00
State: open

Hi Daniel,

I've added a strategy for basic http authentication, seen here: https://gist.github.com/1337882.

The intention is to have a basic auth strategy for web services and a password strategy for the human web. The :default scope has [:password, :basic] for strategies.

This version works, except that not providing credentials never results in a 401, only wrong credentials. What would you recommend I do, create two 'unauthorized' routes, one for html and the other for json? Am I misunderstanding the use case?

I'd very much appreciate any insight you can bring.

Regards
Jamie