It would be very helpful if the server could take bcrypt passwords, such as the output of htpasswd -nB username and use that username/cypher pair for authentication instead of having cleartext passwords all over the place... :)
I agree. At that point I think we should implement proper token based authentication. JWT and OAuth2 would be my preferred method. This would also enable different login providers later down the line.
+1 for OAuth2, especially with generic providers! I'll be using Keycloak if this becomes an option. i'll open a separate issue for that.
The password is meant more of as a crutch, its best to put a reverse proxy in front for auth.
Most helpful comment
I agree. At that point I think we should implement proper token based authentication. JWT and OAuth2 would be my preferred method. This would also enable different login providers later down the line.