Skip to content

Conversation

@serpilliere
Copy link

Hi!
First of all, thank you for this project!

This PR adds authentication method using x-authorization header.
With this, you can a reverse proxy to the webdav-server (for example apache) which authenticate clients using for example kerberos. Once the authentication done, the reverse proxy forward http requests to the wedav-server adding the x-authorization header. In this mode, this header is trusted by the webdav-server and contains the authenticated username.

Side effects of the PR:
The original code always tries to get the authentication header, and add the possibility do to "opportunistic" authentication.
As at this point we don't know which header we may use, the code remove this opportunistic authentication. The authentication is mandatory or not.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant