Skip to content

feat(auth): implement basic http auth with htpasswd file#2

Merged
dvjn merged 1 commit intomainfrom
feature/htpasswd-basic-auth
Feb 7, 2026
Merged

feat(auth): implement basic http auth with htpasswd file#2
dvjn merged 1 commit intomainfrom
feature/htpasswd-basic-auth

Conversation

@dvjn
Copy link
Copy Markdown
Owner

@dvjn dvjn commented Feb 5, 2026

Implements HTTP Basic Authentication using HTPASSWD file format.

Key Features

  • Environment variable configuration: AUTH__HTPASSWD__FILE or AUTH__HTPASSWD__CONTENTS
  • Security-focused error handling prevents user enumeration attacks
  • Conformance testing with auth-aware matrix (both none and htpasswd)
  • Comprehensive auth spec tests included

Configuration

Set env var to enable:

  • AUTH__MODE=htpasswd
  • AUTH__HTPASSWD__FILE=/path/to/.htpasswd (file-based)
  • AUTH__HTPASSWD__CONTENTS=user:$2y$hash... (inline)

Assisted-by: Tern (OpenClaw on GLM 4.7)

coderabbitai[bot]

This comment was marked as outdated.

coderabbitai[bot]

This comment was marked as outdated.

@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch 2 times, most recently from 103f9f9 to ebb36ea Compare February 5, 2026 20:41
@dvjn dvjn changed the title Feature: HTPASSWD Basic Authentication docs(auth): add HTPASSWD basic authentication specification Feb 5, 2026
@dvjn dvjn mentioned this pull request Feb 5, 2026
25 tasks
@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch from ebb36ea to dd4b01f Compare February 5, 2026 20:43
@dvjn dvjn changed the title docs(auth): add HTPASSWD basic authentication specification feat(auth): implement HTTP Basic Authentication for OCI registry Feb 5, 2026
@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch 3 times, most recently from 6af8ecc to 9001157 Compare February 5, 2026 21:06
coderabbitai[bot]

This comment was marked as outdated.

@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch from 7d31967 to 05beed0 Compare February 6, 2026 04:14
coderabbitai[bot]

This comment was marked as outdated.

coderabbitai[bot]

This comment was marked as outdated.

@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch from d4f5e24 to f42d331 Compare February 6, 2026 04:53
coderabbitai[bot]

This comment was marked as outdated.

Repository owner deleted a comment from coderabbitai bot Feb 6, 2026
@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch from fb5c91a to a15b9a9 Compare February 7, 2026 22:03
@dvjn dvjn changed the title feat(auth): implement HTTP Basic Authentication for OCI registry feat(auth): implement basic http auth with htpasswd file Feb 7, 2026
@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch 3 times, most recently from 28cdea7 to 6996132 Compare February 7, 2026 22:12
- added htpasswd-based basic authentication support
- config via AUTH__HTPASSWD__FILE or AUTH__HTPASSWD__CONTENTS env vars
- added conformance testing with auth matrix (none, htpasswd)
- includes comprehensive auth spec tests
- prevents user enumeration attacks

Assisted-by: Tern (OpenClaw on GLM 4.7)
@dvjn dvjn force-pushed the feature/htpasswd-basic-auth branch from 6996132 to 1efef4f Compare February 7, 2026 22:14
@dvjn dvjn merged commit b1d71b5 into main Feb 7, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant