auth: include Basic challenge in 401 responses

Requests rejected by Basic authentication currently return 401 without WWW-Authenticate, preventing HTTP clients from prompting for credentials. Advertise the Basic scheme on the server and metrics auth paths while leaving proxy authentication unchanged.
This commit is contained in:
Alpha
2026-10-07 06:16:54 +08:00
parent ca666baf9c
commit 9d98cbd03f
4 changed files with 70 additions and 2 deletions
+6
View File
@@ -0,0 +1,6 @@
Bugfix: Include a Basic authentication challenge when credentials are rejected
Requests rejected by Basic authentication now include a `WWW-Authenticate` header,
allowing HTTP clients to prompt for credentials.
https://github.com/restic/rest-server/issues/376