plug_hyper_auth v0.1.0 HyperAuth

Plug for HTTP AAA using the HTTP Auth framework.

This plug is extensible with the behaviours:

When a configured scheme is found in the authorization header it will use that to process the values of the header (with access to the connection but the modifications are ignored), with that values and other generic values the authenticator will authenticate the user (without access to connection).

This library support the common schemes then often you only need extend it with modules of HyperAuth.Authenticator behaviour (more safe than extend the schemes).

RFC 2617 http://www.ietf.org/rfc/rfc2617.txt http://www.webdav.org/specs/rfc2617.html

RFC 7235 https://tools.ietf.org/html/rfc7235 http://www.webdav.org/specs/rfc7235.html

RFC 7616 https://tools.ietf.org/html/rfc7616

+——-+————+————+———+ | TLS | PUBLIC | HEADER | AUTH | +——-+————+————+———+——-+———+ | NO | NO | NO | NO | 403 | anon | | NO | NO | YES | NO | 403 | anon | | NO | NO | YES | YES | 403 | anon | | NO | YES | NO | NO | 200 | anon | | NO | YES | YES | NO | 403 | anon | | NO | YES | YES | YES | 403 | anon | | YES | NO | NO | NO | 401 | anon | | YES | NO | YES | NO | 401 | anon | | YES | YES | NO | NO | 200 | anon | | YES | YES | YES | NO | 200 | anon | | YES | NO | YES | YES | 200 | user | | YES | YES | YES | YES | 200 | user | +——-+————+————+———+——-+———+

Link to this section Summary

Functions

Configure the schemes alloweds and the authenticator

Link to this section Functions

Link to this function call(conn, opts)

Configure the schemes alloweds and the authenticator.

The default schemes are:

  • Basic: HyperAuth.Scheme.Basic
  • Digest: HyperAuth.Scheme.Digest