ironic-lib/releasenotes/notes/basic-auth-middleware-e5af29651b2d7979.yaml
Steve Baker a9abc5699f Implement Basic HTTP authentication middleware
This middleware is added to ironic-lib so that it can eventually be
used by ironic and ironic-inspector as an alternative to noauth in
standalone environments.

This middleware is passed a path to a file which supports the
Apache htpasswd syntax[1]. This file is read for every request, so no
service restart is required when changes are made.

The only password digest supported is bcrypt, and the ``bcrypt``
python library is used for password checks since it supports ``$2y$``
prefixed bcrypt passwords as generated by the Apache htpasswd utility.

[1] https://httpd.apache.org/docs/current/misc/password_encryptions.html
Needed-By: https://review.opendev.org/727467
Needed-By: https://review.opendev.org/729463

Change-Id: I874783b8ece0eedf27a94dfed5163d0c82f8b9de
Story: 2007656
Task: 39740
2020-05-26 10:00:06 +12:00

19 lines
738 B
YAML

---
features:
- |
Implement Basic HTTP authentication middleware.
This middleware is added to ironic-lib so that it can eventually be
used by ironic and ironic-inspector as an alternative to noauth in
standalone environments.
This middleware is passed a path to a file which supports the
Apache htpasswd syntax[1]. This file is read for every request, so no
service restart is required when changes are made.
The only password digest supported is bcrypt, and the ``bcrypt``
python library is used for password checks since it supports ``$2y$``
prefixed bcrypt passwords as generated by the Apache htpasswd utility.
[1] https://httpd.apache.org/docs/current/misc/password_encryptions.html