Airsonic: Support HTTP Auth header for authentication

[danieldietsch]

Problem description

I am currently trying to switch from Subsonic 6.0 to Airsonic.
I want to use Airsonic behind an Apache reverse proxy and I want to use Apache's BasicAuth.
The username from BasicAuth should be used as user in Airsonic without having to login again using the login screen.
This was possible with Subsonic without any additional configuration.

Per Reddit, this may be a feature request.

System information

• Airsonic version: Build from source, master branch, b3f432a
• Operating system: Linux, Gentoo, Kernel 4.15.14
• Proxy server: Apache 2.4.29-r1
• Client: Opera 53.0.2907.68, Firefox 60.0.2

[muff1nman]

Hm, well it doesn't surprise me that the behavior here might be different than Subsonic as spring security has been revamped quite a bit since. In general, I don't see us spending any time on getting this to work as the Airsonic Web UI (and subsonic for that matter) heavily relies on a secure cookie to function correctly.

[muff1nman]

OAuth might be interesting, however.

[danieldietsch]

Perhaps I can give it a try if I find time. But good to know that it is not supported atm.

[jvoisin]

The advantage of using a basic auth is that the authentication is happening on the reverse-proxy, instead of somewhere deep in a Java behemoth with interesting issues (#937, #935, …)

[unclesamwk]

OAuth +1

[stale[bot]]

This issue has been automatically marked as stale because it has not had recent activity. Thank you for your contributions.