9 Commits (4f1210f028b7a2059f806614cddc7e58a502f296)

Author	SHA1	Message	Date
ulferts	c88b0b85c4	return proper WWW Authenticate header on missing credentials (#6150) ... An anonymous_fallback is introduced and registered to be the last strategy for warden. That strategy will always apply and it will always return the anonymous user. The better way would be to only apply the strategy if login is not required. That way we would still be able to return a 403 when credentials are missing but would no longer need to have 401 handlers outside of warden. That duplicity caused the missing header in the first place. It would however require us to handle the realm in the strategy and by that increase the coupling between the strategy and the application. [ci skip]	7 years ago
Markus Kahl	6fa07f060f	fixed default realm	10 years ago
Markus Kahl	a770bf762c	follow warden default, which is true for store	10 years ago
Markus Kahl	3865ce4f1f	polish	10 years ago
Markus Kahl	bcd981df5c	consider X-Authentication-Scheme; opt scoped realm	10 years ago
Markus Kahl	6fc3469671	use hash to save a bunch of brackets and commas	10 years ago
Markus Kahl	7e40c11ca4	moved strategies; refactoring	10 years ago
Markus Kahl	d4dfdb9dcc	use API keys for user basic auth; refactoring	10 years ago
Markus Kahl	6cb6953a07	basic auth for api v3 (WIP)	10 years ago