Servant.Server.Internal.BasicAuth

servant-server's current implementation of basic authentication is not immune to certain kinds of timing attacks. Decoding payloads does not take a fixed amount of time.

The result of authentication/authorization

Datatype wrapping a function used to check authentication.

Internal method to make a basic-auth challenge

Find and decode an Authorization header from the request as Basic Auth

Run and check basic authentication, returning the appropriate http error per the spec.