HTTP Basic authentication

Checks the credentials provided through HTTP Basic Authentication according to RFC 7617 and returns an access token for valid credentials.

The credentials (username and password) MUST be sent in the HTTP header Authorization with type Basic and the Base64 encoded string consisting of username and password separated by a double colon :. The header would look as follows for username user and password pw: Authorization: Basic dXNlcjpwdw==.

The access token has to be used in the Bearer token for authorization in subsequent API calls (see also the information about Bearer tokens in this document). The access token returned by this request MUST NOT be provided with basic// prefix, but the Bearer Token sent in subsequent API calls to protected endpoints MUST be prefixed with basic//. The header in subsequent API calls would look as follows: Authorization: Bearer basic//TOKEN (replace TOKEN with the actual access token).

It is RECOMMENDED to implement this authentication method for non-public services only.