使用 http-auth 消化身份验证

Question

尝试在 nodejs 中实现 Digest auth。下面是代码

var http = require('http');
var auth = require('http-auth');
var express = require('express');
var app = express();
var user;

var basic = auth.basic({
    realm: 'Sample',
    file: __dirname + "/users.htpasswd",
    algorithm:'md5'
});

basic.on('success', (result, req) => {
    console.log(`User authenticated: ${result.user}`);
    user = result.user;
});

basic.on('fail', (result, req) => {
    console.log(`User authentication failed: ${result.user}`);
    console.log(req.headers.authorization);
});

basic.on('error', (error, req) => {
    console.log(`Authentication error: ${error.code + " - " + error.message}`);
});

http.createServer(app).listen(8000);

app.use(auth.connect(basic));

app.get('/', function(req, res) {
    console.log(req.headers);
    console.log(basic);
    res.json('Hello from '+ user);
    res.end();
});

app.post('/', function(req, res) {
    console.log(req.headers);
    console.log(basic);
    res.json('Hello from '+ user);
    res.end();
});

这是 users.htpasswd 文件的内容：- ankit：示例：e4b2d19b03346a1c45ce86ad41b85c5e

每次我收到 401 时，使用 postman 调用带有用户名 ankit、pwd ankit 和领域示例的端点。

请告诉我哪里做错了。

谢谢

Answer 1

您正在混合基本身份验证和摘要身份验证。将auth.basic 替换为auth.digest，您的代码应该可以正常工作。