Adding HTTP Basic Auth to WebpackDevServer

start.js (shortened)

// around line 25...
var config = require('../config/webpack.config.dev');
var paths = require('../config/paths');
var auth = require('basic-auth');
//...

function runDevServer(host, port, protocol) {
  var devServer = new WebpackDevServer(compiler, {
    //around line 265...
    host: host,
    setup: function(app) {
      app.all('*', function (req, res, next) {
        if (process.env.AUTH_USER && process.env.AUTH_PASSWORD) {
          var credentials = auth(req)

          if (!credentials || credentials.name !== process.env.AUTH_USER || credentials.pass !== process.env.AUTH_PASSWORD) {
            res.statusCode = 401
            res.setHeader('WWW-Authenticate', 'Basic realm="Prototype Access"')
            res.end('Access denied')
          } else {
            next()
          }
        } else {
          next()
        }
      })
    }
  });

  // Our custom middleware proxies requests to /index.html or a remote API.
  addMiddleware(devServer);

  //...
}
//...