Add HTTP Basic Auth support

[timkendall]

#30

[leo]

Looks great! But please don't increment the version tag in package.json for us. Depending on what will follow, it might also be a major release... 😊

[timkendall]

Gotcha. Was wondering about that. I'll revert it when I get back to my computer later today. Great little library thanks for sharing!

[aesopwolf]

I'd be interested in seeing a slightly different API. One that pulls user/pass from environment variables automatically (perhaps process.env.LIST_BASIC_AUTH_USER and process.env.LIST_BASIC_AUTH_PASS by default). This would require only a single command line arg of --auth

You can then optionally supply a user/pass directly to the auth command in case you want to override looking up the environment variables. So --auth username:password

[timkendall]

Hmm yeah this could be good. @leo any thoughts?

[leo]

👌

But let's only do the env vars, so that we can prevent people from hardcoding stuff. On now, env variables can be filled with secrets defined on the platform.

LIST_USER
LIST_PASSWORD

My dream world would be to only request a password and not a user, not sure if that's possible.

[rauchg]

Not possible with basic auth, but that would be dreamy for many many scenarios :)

[rauchg]

It's missing error reporting if the env vars are not set

[timkendall]

Oops. Hows that?

[leo]

Thanks!

[electerious]

How can I use HTTP Basic Auth together with now? The following isn't working.

now -e SERVE_USER=abc -e SERVE_PASSWORD=abc

[leo]

@electerious The flag is missing: https://github.com/zeit/serve#authentication

[electerious]

True, but how can I pass the --auth to the serve module when deploying via now?

[derhuerst]

@electerious It should be just like to did above.

[electerious]

But now --auth -e SERVE_USER=abc -e SERVE_PASSWORD=abc passes the --auth flag to now, right? It won't be forwarded to serve.

[leo]

Correct. You can't pass flags to serve via now. You need a custom package.json

[derhuerst]

@electerious The start script in package.json would usually contain the --auth flag. User & password would be read from the env, provided by you via now -e ….

[t829702]

is this feature documented? how to use in standalone? (not with now)
https://github.com/vercel/serve#authentication (either in README or in --help ?)