Blocks requests which do not have the correct RFC 1945 basic authentication credentials (HTTP header "Authentication: Basic ....").

Can be used in

abort api case chain for global if interceptor internal otherwise proxy registration request response serviceProxy soapProxy stompProxy time transport wsStompReassembler

Syntax

<basicAuthentication>
   <user >*
</basicAuthentication>

<basicAuthentication>
   <user >*
</basicAuthentication>

Sample

<serviceProxy>
  <basicAuthentication>
    <user name="admin" password="adminadmin" />
    <user name="guest" password="guestguest" />
  </basicAuthentication>
  <target host="www.predic8.de" />
</serviceProxy>

<serviceProxy>
  <basicAuthentication>
    <user name="admin" password="adminadmin" />
    <user name="guest" password="guestguest" />
  </basicAuthentication>
  <target host="www.predic8.de" />
</serviceProxy>

Attributes

Name	Required	Default	Description	Examples
removeAuthorizationHeader	false	true	Removes the Authorization header after successful authentication. Default is true to prevent credentials from being forwarded to backends. Set to false if both gateway and backend need to validate credentials.	-

Child Elements

Element	Description	Cardinality
cachingUserDataProvider	Caching User Data provider caches previous successful logins in order to make authentication faster	0..1
htpasswdFileProvider	A user data provider utilizing `htpasswd`-style files.	0..1
ldapUserDataProvider	A user data provider querying an LDAP server to authorize users and retrieve attributes.	0..1
staticUserDataProvider	A user data provider listing all user data in-place in the config file.	0..1
unifyingUserDataProvider	Explanation:	0..1
user		0..*