Basic authorization header

[dbauszus-glx]

It should be possible to provide a base64 encoded authentication header --user with a request.

eg.

curl http://localhost:3000/api/user/key --user "[email protected]:mypassword"

The auth.js module will short circuit and await the fromACL.js response which is either a user object or error.

The fromACL.js module is taken from the post method from the login module which now requires the fromACL module.

The ACL module itself has been formatted to return the ACL query method.

The ACL module can now be required without having to be executed.

[dbauszus-glx]

The remote_address check has been updated
to prevent Unexpected constant truthiness on the left-hand side of a || expression.

  const remote_address = /^[A-Za-z0-9.,_-\s]*$/.test(req.headers['x-forwarded-for'])
   ? req.headers['x-forwarded-for'] : undefined;

[sonarqubecloud]

Quality Gate passed

Kudos, no new issues were introduced!

0 New issues
0 Security Hotspots
No data about Coverage
0.0% Duplication on New Code

See analysis details on SonarCloud

[RobAndrewHurst]

Nice one!

I tested this out using this small script

import axios from 'axios';

const url = 'http://localhost:3000/latest/api/user/key';
const username = 'myUser';
const password = 'myPassword';

const auth = {
  username: username,
  password: password
};

axios.get(url, { auth })
  .then(response => {
    console.log('Response:', response.data);
  })
  .catch(error => {
    console.error('Error:', error.message);
  });

Works well 👍