HTTP Basic and Digest Authentication using WebSpeed

[JamesBowen]

INFO:
OS RedHat SE 4/ Apache 2.3 Web Server.
OE 10.2A SP02

Is is possible for WebSpeed to handle the "HTTP authentication" process?

When a user wants to access a webpage, I want the browser to pop-up with a username & password dialog box. I've done a some research and I'm about 50% of the way there. However I am having problems retrieving the submitted username and Password from the cgi variable list.

Please see attached zip file to see what I am trying to do thanks.

 

[JamesBowen]

I have found the problem:

I needed to modify the apache conf file to include this line:

RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]

Then the WebSpeed variable AUTH_TYPE then became populated with what was needed.

Solution found here:
http://www.besthostratings.com/articles/http-auth-php-cgi.html

 

[JamesBowen]

I've now extended this HTTP Authentication process to now use a more secure method by using the DIGEST rather as-well as BASIC.

http://tools.ietf.org/html/rfc2617

Please feel free to use it or improve it. Thanks.