Skip to content

feat: authorize WHIP and WHEP by HTTP Basic - #482

Merged
devopvoid merged 1 commit into
mainfrom
feat/http-basic-auth
Oct 29, 2026
Merged

devopvoid merged 1 commit into
mainfrom
feat/http-basic-auth

Conversation

@devopvoid

Copy link
Copy Markdown
Owner
  • basicAuth(user, password) on Whip.Builder and Whep.Builder sends Basic credentials (RFC 7617, UTF-8) with every request of the session, as RFC 9725 4.7 asks clients to support HTTP authentication besides bearer tokens; MediaMTX takes them this way.
  • Of bearerToken and basicAuth, the one called last counts. A user with a colon is refused.
  • Digest and challenge-based login are not supported; Java's HttpClient has no Digest.

basicAuth(user, password) on Whip.Builder and Whep.Builder sends Basic
credentials (RFC 7617, UTF-8) with every request of the session, as RFC
9725 4.7 asks clients to support HTTP authentication besides bearer
tokens; MediaMTX takes them this way. The one of bearerToken and
basicAuth called last counts.
@devopvoid
devopvoid merged commit 2deab19 into main Oct 29, 2026
25 checks passed
@devopvoid
devopvoid deleted the feat/http-basic-auth branch October 29, 2026 08:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant