websocket client basic authentication

[embetrix]

I didn't find any information how the websocket client basic authentication is working ?

for the http this works without any problem:

curl -X POST http://192.168.178.101:8080 --digest -u "myuser:p!ass123" -w "%{http_code}"

But for websocket for example using wscat :

wscat -c ws://192.168.178.101:8080 --auth "myuser:p!ass123"

doesn't work !

any hints are welcome

[scaprile]

There is no authentication in WS but in HTTP
It is you who has to write the code to check for authentication and upgrade the connection to WS after authenticating the URL.
https://mongoose.ws/documentation/tutorials/device-dashboard/

mongoose/examples/device-dashboard/net.c

Lines 223 to 225 in b379816

	} else if (u == NULL && mg_http_match_uri(hm, "/api/#")) {
	// All URIs starting with /api/ must be authenticated
	mg_http_reply(c, 403, "", "Denied\n");

mongoose/examples/device-dashboard/net.c

Lines 263 to 265 in b379816

	} else if (mg_http_match_uri(hm, "/api/watch")) {
	c->data[0] = 'W'; // Mark ourselves as a event listener
	mg_ws_upgrade(c, hm, NULL);

https://mongoose.ws/documentation/tutorials/webui-login/

[Yhee2]

Hello, sorry to bother, but if I use Mongoose as a client to access an authenticated website via HTTP, how can I input the token? I would greatly appreciate it.

[cpq]

@Yhee2 depends on the auth mechanism that server uses.
Assuming it is Basic auth - then, a client must provide an Authorization: Basic TOKEN, where TOKEN is a base64-encoded user:password string. That header can be made like this:

char buf[128];
size_t n = mg_snprintf(buf, sizeof(buf), "%s:%s", user, pass);  // Create user:password string
mg_ws_connect(mgr, url, fn, fn_data, "Authorization: Basic %M\r\n", mg_print_base64, n, buf);

[Yhee2]

Thank you very much for your answer.

[cpq]

@embetrix I've noticed you're using digest auth in curl argument. Mongoose can do basic auth, not digest.

Mongoose has function "creds" that fetches user and password from Authorization header and Cookie (access_token):

mongoose/examples/device-dashboard/net.c

Lines 113 to 114 in 7f3d450

	mg_http_creds(hm, user, sizeof(user), pass, sizeof(pass));
	MG_INFO(("user [%s] pass [%s]", user, pass));