5 ms·
> Does even anybody remember the good old HTTP basic acess authentification? This is one of the most accessible ways of protecting ressources, it can be consume
by yoz-y 7y ago
> Does even anybody remember the good old HTTP basic acess authentification? This is one of the most accessible ways of protecting ressources, it can be consumed by any HTTP client (!), and it is just reduced to the basic.
Basic authentication is fine if all you need is to control access to documents, but it can not be used for access delegation or any scope control.
- duijf 7y agoThat depends entirely on how/where you implement this. You can make your application code check the authorization header, get the username from there and do authorization based on that.
- kalleboo 7y ago> but it can not be used for access delegation or any scope control Why not? It's just a header with a username and password. Your app can do whatever you want with that info. It also doesn't strictly have to be a username and password, you allow app tokens or whatever you want in there, that's just what the browser UI calls it.
- SmellyGeekBoy 7y agoI assume you're not a .NET developer...
- yoz-y 7y agoNo I'm not. Care to elaborate?