带有Express的http-auth-不断弹出登录提示

Question

So I'm trying to password protect my node.js app with http-auth. I saw many people that needed help with that too and tried multiple things. But now I'm stuck. The password is working fine, but the login prompt pops up again as soon as you logged in into the previous one. I can't get full access to my app.

My auth-part looks like this:

var preAuth = require('http-auth');
var basic = preAuth.basic({
    realm: "Private area",
    file: __dirname + "/htpasswd",
    //Type: "basic"
});


var server;
var app = express();
app.use(preAuth.connect(basic));

If I add a

app.get('/test', function(req, res) {
    res.send("Hello from express - " + req.user + "!");
});

I can access the /test site no problem and it shows me "Hello from express - insertUsernameHere!"

But it won't work with my app. Is this because of my express.static? I'm not that good with javascript/node.js and still learning.

(And sorry if I upset anybody with my english, I know it is not perfect)

Answer 1

You probably defined app.use(auth.connect(basic)); after specifying the static files.

That's the reason your static files are not protected.

Make sure you set the authorization before setting the use of static files:

app.use(preAuth.connect(basic));
app.use(express.static(path.join(__dirname, 'public')));