3 ms·
I use a custom authorizer with Auth0 and it works fine. I guess some systems still use Basic Auth though.
by x_foo_x 10y ago
I use a custom authorizer with Auth0 and it works fine. I guess some systems still use Basic Auth though.
- colanderman 10y agoWWW-Authenticate is a requirement of HTTP itself, not Basic Auth. Returning 401 without this header (which API Gateway does) violates RFC 7235. It is the means by which HTTP negotiates an authentication protocol; without it, there is no way for authentication to proceed except by guessing.