Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Problem with Basic Auth

See original GitHub issue

I’m getting 500 Internal Server Error everytime. Is there any problem in this code

POST https://localhost:5001/api/authenticate/ HTTP/1.1

@username = "john doe"
@password = "foobar"

Authorization: Basic {{username}}:{{password}}

Issue Analytics

State:
Created a year ago
Comments:14

Top GitHub Comments

1reaction

pratikkabadecommented, Sep 19, 2022

@lhasadad, I added an extra line between POST and Authorization that was causing this error.

correct syntax

POST https://localhost:5001/api/authenticate/ HTTP/1.1
Authorization: Basic johndoe:foobar

1reaction

pratikkabadecommented, Sep 7, 2022

@lhasadad no… its not that big of a deal but still ill see removing it

Top Results From Across the Web

Is BASIC-Auth secure if done over HTTPS?

There is another concern with using HTTP basic authentication: the full password is sent over the SSL tunnel. In other words, the password...

The Security Flaws of Basic Authentication - O'Reilly

Basic authentication is simple and convenient, but it is not secure. It should only be used to prevent unintentional access from nonmalicious parties...

Simple Security Fails (part 5) - Basic Authentication

The Issue · No session management. No logout functionality · No support for account lockout. Attackers can continuously brute force account ...

Is basic access authentication secure? - Stack Overflow

The worry about basic auth is that the credentials are sent as cleartext and are vulnerable to packet sniffing, if that connection is ......

Pentesting Basic Authentication - Virtue Security

Problems with Basic Authentication · The username and password are sent in every request. · Most configurations of Basic Authentication do not implement ......