When I create a new websocket using chrome
new WebSocket('ws://gert:passwd@127.0.0.1:8001/dbname')
The nodejs server receives
GET /dbname HTTP/1.1
Upgrade: WebSocket
Connection: Upgrade
Host: 127.0.0.1:8001
Origin: http://127.0.0.1:8000
Sec-WebSocket-Key1: ' 5 5) 4 1e a9 9 0 19
Sec-WebSocket-Key2: 3000909100 Q
How can I retrieve gert and passwd?
is seems like chrome does not pass basic auth data in ws headers indeed.
Why not have login/pwd as part of url query string? (and use secure wss)