使用http-auth摘要身份验证

Question

尝试在nodejs中实现摘要身份验证。下面是代码

var http = require('http');
var auth = require('http-auth');
var express = require('express');
var app = express();
var user;

var basic = auth.basic({
    realm: 'Sample',
    file: __dirname + "/users.htpasswd",
    algorithm:'md5'
});

basic.on('success', (result, req) => {
    console.log(`User authenticated: ${result.user}`);
    user = result.user;
});

basic.on('fail', (result, req) => {
    console.log(`User authentication failed: ${result.user}`);
    console.log(req.headers.authorization);
});

basic.on('error', (error, req) => {
    console.log(`Authentication error: ${error.code + " - " + error.message}`);
});

http.createServer(app).listen(8000);

app.use(auth.connect(basic));

app.get('/', function(req, res) {
    console.log(req.headers);
    console.log(basic);
    res.json('Hello from '+ user);
    res.end();
});

app.post('/', function(req, res) {
    console.log(req.headers);
    console.log(basic);
    res.json('Hello from '+ user);
    res.end();
});

这是users.htpasswd文件的内容：- ankit:Sample:e4b2d19b03346a1c45ce86ad41b85c5e

使用postman调用端点，用户名为ankit，pwd ankit & realm Sample，每次我得到401。

请告诉我我哪里做错了。

谢谢

Answer 1

您混合了基本身份验证和摘要身份验证。用auth.digest替换auth.basic，您的代码应该可以按原样工作。