Laravel HTTP basic authentication not working

Question

I'm building an API in Laravel and am attempting to use HTTP basic authentication. I've created a user with the email/password combination of [email protected]:testpass. I'm accessing an endpoint at the following URL which requires authentication: https://[email protected]:[email protected]/users/2

When I attach the auth.basic route filter to this route, I can successfully authenticate and access the authenticated user's details through the Auth class, however since this is an API I want to use stateless HTTP basic authentication, so I wrote my own filter:

// Our own auth filter to use onceBasic and return a consistent API response
Route::filter('basic.once', function() {
    $result = Auth::onceBasic();

    if ($result->getStatusCode() === 401) {
        // Unauthorized, return our own response
        return Response::json([
            'message' => 'Bad credentials'
        ], Config::get('status.error.unauthorized'));
    }

    return $result;
});

No matter what, the result of Auth::onceBasic() here always returns unauthorized, even though the username/password combination I'm sending stays the same. Even if I change Auth::onceBasic() to Auth::basic() in my filter it still returns unauthorized.

I don't even know where to start debugging this as my filter is essentially the same as the auth.basic filter that ships with Laravel, albeit with a bit more code to produce a consistent API output.

Could you post your user model? Also, is your password in the db hashed? — lukasgeiter
– lukasgeiter, Commented Nov 4, 2014 at 20:55

WDMTech · Accepted Answer · 2016-10-26 13:10:14Z

1

Are you using PHP FastCGI?

From the official Laravel documentation:

https://laravel.com/docs/5.3/authentication#http-basic-authentication

A Note On FastCGI

If you are using PHP FastCGI, HTTP Basic authentication may not work correctly out of the box. The following lines should be added to your .htaccess file:

RewriteCond %{HTTP:Authorization} ^(.+)$
RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization}]

I managed to solve it myself this way.

answered Oct 26, 2016 at 13:10

WDMTech

1731 silver badge11 bronze badges

Sign up to request clarification or add additional context in comments.

Collectives™ on Stack Overflow

Laravel HTTP basic authentication not working

1 Answer 1

A Note On FastCGI

Comments

Your Answer

Hot Network Questions

Collectives™ on Stack Overflow

1 Answer 1

A Note On FastCGI

Comments

Your Answer

Sign up or log in

Post as a guest

Related