HttpBasicCredentialValidator Delegate

Namespace: Meziantou.AspNetCore.Authentication.HttpBasic
Assembly: Meziantou.AspNetCore.Authentication.HttpBasic.dll
Package: Meziantou.AspNetCore.Authentication.HttpBasic 2.0.5
Available in package assets: net10.0net11.0

Delegate used to validate HTTP Basic credentials.

public delegate ValueTask<ClaimsPrincipal?> HttpBasicCredentialValidator(HttpContext httpContext, string username, string password)

Parameters

httpContext HttpContext: The current HTTP context.
username string: The username from the Authorization header. It may be empty and never contains a colon.
password string: The password from the Authorization header. It may be empty and may contain colons.

Remarks

Credentials containing a control character (U+0000 to U+001F, or U+007F) are rejected before this delegate is called. Other Unicode characters are passed through unchanged, so treat both values as untrusted input and escape them before logging.