flask-basicauth icon indicating copy to clipboard operation
flask-basicauth copied to clipboard

Basic Auth Force Broken

Open Hudsonzp opened this issue 6 years ago • 2 comments

I've been using Basic Auth for some time, but it seems with the recent updates to browsers that this functionality no longer works. If you do a BASIC_AUTH_FORCE and try to secure your entire application, it constantly pops up the user/password box on any route that you go to. My guess would be that it's not storing the authorization header correctly anymore?

If I use @required that seems to work fine, but anything beyond that breaks. In my application I do config from object, but I don't think that's what's causing the bug?

Hudsonzp avatar Jun 17 '18 03:06 Hudsonzp

I've also tried changes mentioned here to no effect. https://github.com/jpvanhal/flask-basicauth/pull/14/files

Hudsonzp avatar Jun 17 '18 03:06 Hudsonzp

It works for me. Any chance u forgot to execute BasicAuth code?

    app.config['BASIC_AUTH_USERNAME'] = 'user'
    app.config['BASIC_AUTH_PASSWORD'] = 'password'
    app.config['BASIC_AUTH_FORCE'] = True
    basic_auth = BasicAuth(app)

vackosar avatar Aug 25 '19 07:08 vackosar