Is there any way to use ktor's authentication with a token provided in a query parameter instead of ...

# ktor

[dave08]

Is there any way to use ktor's authentication with a token provided in a query parameter instead of a header?

[Aleksei Tirman [JB]]

For the bearer provider, you can use the authHeader method to configure the token's source. Here is an example:

install(Authentication) {
    bearer {
        authHeader { 
            val auth = it.request.queryParameters["auth"] ?: throw BadRequestException("No auth query parameter given")
            parseAuthorizationHeader(auth)
        }
    }
}

[dave08]

Thanks, that's perfect! Just funny that it's called authHeader...?

[dave08]

Since there we're really setting the auth source, shouldn't it be authSource { }?

[Aleksei Tirman [JB]]

Not exactly, since the source also has to be parsed.

[dave08]

It's not working @Aleksei Tirman [JB]...?

[dave08]

As a result to that parse function, I get the token in the authScheme of the HttpHeader... is that what's supposed to happen?

[dave08]

It seems to skip the authenticate { } block in bearer { } too...

[dave08]

install(Authentication) {
    bearer {
        authHeader { 
            val auth = it.request.queryParameters["auth"] ?: throw BadRequestException("No auth query parameter given")
            parseAuthorizationHeader("Bearer " + auth)
        }
    }
}

this works... I need to add Bearer to the auth token.

[Aleksei Tirman [JB]]

It depends on the format of the value in the header.