Basic HTTP Auth middleware for express

basicHttpAuth.js

require('dotenv').config();

exports.basicAuth = function (req, res, next) {
  // authentication middleware
  const auth = { login: process.env.LOGIN, password: process.env.PASSWORD }; // change this

  // parse login and password from headers
  const b64auth = (req.headers.authorization || '').split(' ')[1] || '';
  const [login, password] = Buffer.from(b64auth, 'base64')
    .toString()
    .split(':');

  // Verify login and password are set and correct
  if (login && password && login === auth.login && password === auth.password) {
    // Access granted...
    return next();
  }

  // Access denied...
  res.set('WWW-Authenticate', 'Basic realm="401"'); // change this
  res.status(401).send('Authentication required.'); // custom message
};