HTTP Basic Authentication

HTTP Basic Authentication A sequence diagram generated by Archify. open /admin GET /admin (no header) 401 + WWW-Authenticate: Basic realm="Admin", charset="UTF-8" show login dialog type toby / secret Authorization: Basic dG9i… Base64 of "toby:secret" decode, compare hash match 200 OK show admin page resend Authorization every request in the realm check again from scratch 200 OK 1. No credentials yet 2. Sending credentials 3. Subsequent requests User · types credentials · Sequence participant User types credentials Browser · Chrome, curl… · Sequence participant Browser Chrome, curl… Server · nginx / Laravel · Sequence participant Server nginx / Laravel Credential store · htpasswd / users · Sequence participant Credential store htpasswd / users Legend main request return security async trace message