plug_hyper_auth v0.1.0 HyperAuth
Plug for HTTP AAA using the HTTP Auth framework.
This plug is extensible with the behaviours:
When a configured scheme is found in the authorization header it will use that to process the values of the header (with access to the connection but the modifications are ignored), with that values and other generic values the authenticator will authenticate the user (without access to connection).
This library support the common schemes then
often you only need extend it with
modules of HyperAuth.Authenticator
behaviour (more safe than extend the
schemes).
RFC 2617 http://www.ietf.org/rfc/rfc2617.txt http://www.webdav.org/specs/rfc2617.html
RFC 7235 https://tools.ietf.org/html/rfc7235 http://www.webdav.org/specs/rfc7235.html
RFC 7616 https://tools.ietf.org/html/rfc7616
+——-+————+————+———+ | TLS | PUBLIC | HEADER | AUTH | +——-+————+————+———+——-+———+ | NO | NO | NO | NO | 403 | anon | | NO | NO | YES | NO | 403 | anon | | NO | NO | YES | YES | 403 | anon | | NO | YES | NO | NO | 200 | anon | | NO | YES | YES | NO | 403 | anon | | NO | YES | YES | YES | 403 | anon | | YES | NO | NO | NO | 401 | anon | | YES | NO | YES | NO | 401 | anon | | YES | YES | NO | NO | 200 | anon | | YES | YES | YES | NO | 200 | anon | | YES | NO | YES | YES | 200 | user | | YES | YES | YES | YES | 200 | user | +——-+————+————+———+——-+———+
Link to this section Summary
Link to this section Functions
Configure the schemes alloweds and the authenticator.
The default schemes are:
- Basic: HyperAuth.Scheme.Basic
- Digest: HyperAuth.Scheme.Digest