Naive Basic Auth Middleware for Koa

koa-naive-basic-auth.ts

import crypto from 'crypto';

export function basicAuthMiddleware({ name, pass }: any): Function {
  const auth = `Basic ${Buffer.from([name, pass].join(':')).toString(
    'base64'
  )}`;
  return async (ctx: any, next: any): Promise<any> => {
    const header = ctx.request.get('Authorization');
    const headerMatches =
      header &&
      header.length === auth.length &&
      crypto.timingSafeEqual(Buffer.from(header), Buffer.from(auth));
    if (headerMatches) {
      await next();
    } else {
      ctx.status = 401;
      ctx.set('WWW-Authenticate', 'Basic');
      ctx.body = 'Access denied';
    }
  };
}