Basic Auth module - conflict with server side Authentication #4744
stefan-korn
started this conversation in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Are you aware of problems resulting from the use of Drupal basic_auth module together with a server side basic authentication?
This seems to be an inherent problem of basic_auth module:
https://www.drupal.org/project/drupal/issues/2618780
https://www.drupal.org/project/drupal/issues/2842858
This makes a DKAN site practically unusable in a test environment that might use a server side basic authentication, because every page request is served a 403 then.
The recommendation from Drupal and others seems to not use basic_auth module for protecting an API.
Is there a documented way to get rid of basic_auth module with DKAN by still providing a protection for protected API calls. Even if maybe the protected API calls are generally not accessible in that case?
All reactions