Add http basic auth integration for a list of credentials

CHANGELOG.md

@@ -1,3 +1,9 @@
+2.3.1
+=====
+
+* (improvement) Add method `integrateHttpBasicAuth()` for handling a list of Http Basic Auth Credentials
+* (deprecation) Deprecate `handleHttpBasicAuth` method
+
 2.3.0
 =====
 

src/next/middleware/http-auth.ts

@@ -1,7 +1,14 @@
 import type {NextRequest} from "next/server";
 
+export interface Credentials {
+	username: string;
+	password: string;
+}
+
 /**
  * Handles basic authentication
+ *
+ * @deprecated Use the new method 'integrateHttpBasicAuth' allowing a list of credentials to check against instead
  */
 export function handleHttpBasicAuth (
 	request: NextRequest,
@@ -10,6 +17,24 @@ export function handleHttpBasicAuth (
 	responseText: string = "Auth required",
 	realmLabel: string = "Secure Area",
 ) : Response | undefined
+{
+	return integrateHttpBasicAuth(
+		request,
+		[{username: username, password: password}],
+		responseText,
+		realmLabel
+	);
+}
+
+/**
+ * Handles basic authentication
+ */
+export function integrateHttpBasicAuth (
+	request: NextRequest,
+	users: Credentials[],
+	responseText: string = "Auth required",
+	realmLabel: string = "Secure Area",
+) : Response | undefined
 {
 	const auth = request.headers.get("authorization");
 	const authToken = /^Basic (?<token>.*?)$/.exec(auth || "");
@@ -20,10 +45,12 @@ export function handleHttpBasicAuth (
 			.toString()
 			.split(":");
 
-		if (givenUser === username && givenPassword === password)
-		{
-			return;
-		}
+		users.forEach((item) => {
+			if (givenUser === item.username && givenPassword === item.password)
+			{
+				return;
+			}
+		})
 	}
 
 	return new Response(responseText, {