a9abc5699f
This middleware is added to ironic-lib so that it can eventually be used by ironic and ironic-inspector as an alternative to noauth in standalone environments. This middleware is passed a path to a file which supports the Apache htpasswd syntax[1]. This file is read for every request, so no service restart is required when changes are made. The only password digest supported is bcrypt, and the ``bcrypt`` python library is used for password checks since it supports ``$2y$`` prefixed bcrypt passwords as generated by the Apache htpasswd utility. [1] https://httpd.apache.org/docs/current/misc/password_encryptions.html Needed-By: https://review.opendev.org/727467 Needed-By: https://review.opendev.org/729463 Change-Id: I874783b8ece0eedf27a94dfed5163d0c82f8b9de Story: 2007656 Task: 39740
19 lines
738 B
YAML
19 lines
738 B
YAML
---
|
|
features:
|
|
- |
|
|
Implement Basic HTTP authentication middleware.
|
|
|
|
This middleware is added to ironic-lib so that it can eventually be
|
|
used by ironic and ironic-inspector as an alternative to noauth in
|
|
standalone environments.
|
|
|
|
This middleware is passed a path to a file which supports the
|
|
Apache htpasswd syntax[1]. This file is read for every request, so no
|
|
service restart is required when changes are made.
|
|
|
|
The only password digest supported is bcrypt, and the ``bcrypt``
|
|
python library is used for password checks since it supports ``$2y$``
|
|
prefixed bcrypt passwords as generated by the Apache htpasswd utility.
|
|
|
|
[1] https://httpd.apache.org/docs/current/misc/password_encryptions.html
|