Play Framework Basic Auth Action (play, scala, basic auth)

ApplicationController.scala

class ControllerWithBasicAuth extends Controller {

  private val WithBasicAuth = new BasicAuthAction("user", "pass")

  def index = WithBasicAuth {
    Ok("Correct basic auth credentials")
  }
}

BasicAuthAction.scala

import play.api.mvc._
import scala.concurrent.Future

class BasicAuthAction(username: String, password: String) extends ActionBuilder[Request] with ActionFilter[Request] {

  private val unauthorized =
    Results.Unauthorized.withHeaders("WWW-Authenticate" -> "Basic realm=Unauthorized")

  def filter[A](request: Request[A]): Future[Option[Result]] = {
    val result = request.headers.get("Authorization") map { authHeader =>
      val (user, pass) = decodeBasicAuth(authHeader)
      if (user == username && pass == password) None else Some(unauthorized)
    } getOrElse Some(unauthorized)

    Future.successful(result)
  }

  private [this] def decodeBasicAuth(authHeader: String): (String, String) = {
    val baStr = authHeader.replaceFirst("Basic ", "")
    val decoded = new sun.misc.BASE64Decoder().decodeBuffer(baStr)
    val Array(user, password) = new String(decoded).split(":")
    (user, password)
  }
}

From: https://stackoverflow.com/questions/43835032/play-2-6-actionbuilder

In Play2.6, "The Scala ActionBuilder trait has been modified to specify the type of the body as a type parameter, and add an abstract parser member as the default body parsers. You will need to modify your ActionBuilders and pass the body parser directly."

Play 2.6 injects a ControllerComponents, which has a default body parser. Maybe this helps:

  override protected def executionContext: ExecutionContext = cc.executionContext
  override def parser: BodyParser[AnyContent] = cc.parsers.defaultBodyParser

And add this to BasicAuthAction class @Inject()(val cc: ControllerComponents).

License?