You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
How about to add a basic auth handler? This is still a good option for 90% of APIs.
Unfortunately the golang doesn't provide it out of the box.
This leads to problems because developers starts to write their own which may not be not secure and fast.
Or devs may start to use some auth library which may be configured not properly and again become vulnerable.
Even while there may be a separate libraries for this I think it may be good option to have it in the library so users will have it with less dependencies.
It's questionable how feature rich it should be. I think it must be plain simple and focused on performance. Just as a starter but also because other more feature rich (and slow) libraries exists.
E.g. no password hashing: for API credentials this not needed because you can simply reset credentials.
How about to add a basic auth handler? This is still a good option for 90% of APIs.
Unfortunately the golang doesn't provide it out of the box.
This leads to problems because developers starts to write their own which may not be not secure and fast.
Or devs may start to use some auth library which may be configured not properly and again become vulnerable.
Even while there may be a separate libraries for this I think it may be good option to have it in the library so users will have it with less dependencies.
It's questionable how feature rich it should be. I think it must be plain simple and focused on performance. Just as a starter but also because other more feature rich (and slow) libraries exists.
E.g. no password hashing: for API credentials this not needed because you can simply reset credentials.
Alternatives:
If you think that it may be useful to add the basic auth handler then I may rework my version to be more useful but still easy to use and send a PR.
The text was updated successfully, but these errors were encountered: