From: Michael <heluecht@pirati.ca>
Date: Sun, 30 Apr 2023 11:53:32 +0000 (+0000)
Subject: Issue 13058: BasicAuth can now be disabled
X-Git-Url: https://git.mxchange.org/?a=commitdiff_plain;h=25636c244250a07f2d547a3e6931299b7c02525c;p=friendica.git

Issue 13058: BasicAuth can now be disabled
---

diff --git a/src/Security/BasicAuth.php b/src/Security/BasicAuth.php
index 25da9b8318..51da7a98ad 100644
--- a/src/Security/BasicAuth.php
+++ b/src/Security/BasicAuth.php
@@ -177,7 +177,7 @@ class BasicAuth
 			}
 			Logger::debug('Access denied', ['parameters' => $_SERVER]);
 			// Checking for commandline for the tests, we have to avoid to send a header
-			if (php_sapi_name() !== 'cli') {
+			if (DI::config()->get('system', 'basicauth') && (php_sapi_name() !== 'cli')) {
 				header('WWW-Authenticate: Basic realm="Friendica"');
 			}
 			throw new UnauthorizedException("This API requires login");
diff --git a/static/defaults.config.php b/static/defaults.config.php
index 3c4fdd762b..7e699fad71 100644
--- a/static/defaults.config.php
+++ b/static/defaults.config.php
@@ -132,6 +132,10 @@ return [
 		// The value has to start with the scheme and end with a "/"
 		'avatar_cache_url' => '',
 
+		// basicauth (Boolean)
+		// Controls if login via BasicAuth is possible (default is true)
+		'basicauth' => true,
+
 		// big_emojis (Boolean)
 		// Display "Emoji Only" posts in big.
 		'big_emojis' => false,