Keeps asking to login about slim-basic-auth HOT 8 CLOSED

Scratch that. It doesnt work in production. Changing the path just made that page publicly accessible.

from slim-basic-auth.

Please show minimal code to reproduce the problem, including a route.

$app = new \Slim\App();

$app->add(new \Slim\Middleware\HttpBasicAuthentication(
  [
    "path" => "/admin",
    "secure" => false,
    "users" => [
      "admin" => "admin"
    ]
  ]
));

$app->get("/admin", function($request, $response, $arguments) {
    print "admin";
});

$app->run();

$ php -S 0.0.0.0:8080 index.php
$ curl --include --user admin:admin http://localhost:8080/admin
HTTP/1.1 200 OK
Host: localhost:8080
Connection: close
X-Powered-By: PHP/5.6.17
Content-Type: text/html; charset=UTF-8
Content-Length: 5

admin

from slim-basic-auth.

Route with Twig

$app->get('/admin', function ($request, $response, $args) {
  $purchase_data = $this->database->getEntry('', true);
  foreach ($purchase_data as $data) {
    $data->purchase = unserialize($data->serialized);
  }

  return $this->view->render($response, 'admin.twig', ['data' => $purchase_data]);
})->setName('admin');

Tried with and without a realm set

$app->add(new \Slim\Middleware\HttpBasicAuthentication(
  [        
    "path" => "/admin",
    "realm" => "Protected",
    "secure" => false,
    "users" => [
      "admin" => "admin"
    ]
  ]
));

% curl --include --user admin:admin http://example.com/admin

HTTP/1.1 401 Unauthorized
Date: Fri, 22 Apr 2016 05:49:05 GMT
Server: Apache/2.4.17 (Unix) OpenSSL/1.0.1e-fips mod_bwlimited/1.4 mod_fcgid/2.3.9
X-Powered-By: PHP/5.5.30
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
WWW-Authenticate: Basic realm="Protected"
Set-Cookie: PHPSESSID=3eeaf6d564e4cae1738d79a1450df241; path=/
Content-Length: 0
Content-Type: text/html; charset=UTF-8

from slim-basic-auth.

Seems you are using FCGI. See Usage with FCGI in README for instructions.

from slim-basic-auth.

Awesome! I had no idea I was using FCGI (it's on shared hosting) but adding the following to .htaccess worked.

RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

Thank you

from slim-basic-auth.

Great :)

from slim-basic-auth.

I have the same issue, I changed my .htaccess but it didn't work
That is my .htaccess

RewriteRule .* - [env=HTTP_AUTHORIZATION:%{HTTP:Authorization}]
RewriteCond %{REQUEST_FILENAME} !-f
RewriteCond %{REQUEST_FILENAME} !-d
RewriteRule ^ index.php [QSA,L]

$app->add(new \Slim\Middleware\HttpBasicAuthentication(
  [
    "path" => "/auth",
    "secure" => false,
    "users" => [
      "admin" => "admin"
    ]
  ]
));

My Route

$app->get('/admin', function ($request, $response, $args) {    
    $this->logger->info("Admin Test'/auth' route");    
    return $response->write("Hello World");
});

I used the browser to do the test .

from slim-basic-auth.

Please show curl example request and response.

$ curl --include --user admin:admin http://example.com/admin

Also you seem to be mixing /auth and /admin.

from slim-basic-auth.