Express middleware for HTTP Basic Authentication.

basicAuthMiddleware.js

function basicAuthMiddleware(request, response, next) {
    const { authorization = '' } = request.headers;
    const [, credentials] = authorization.split(' ');
    const decoded = new Buffer(credentials || '', 'base64').toString();
    const splitIndex = decoded.indexOf(':');
    const username = decoded.substring(0, splitIndex);
    const password = decoded.substring(splitIndex + 1);

    // TODO: supply valid values for username and password
    if (username !== USERNAME || password !== PASSWORD) {
        response.set('WWW-Authenticate', 'Basic realm="Secure site"');
        response.sendStatus(401);
        return;
    }

    next();
}