API: Support HTTP basic authentication for API. v6.0.4, v5.0.152

[duiniuluantanqin]

The 'Basic' HTTP Authentication Scheme

Refer to RFC7617, currently only authentication for HTTP API has been implemented.
Configuration

http_api {
    enabled on;
    listen 8080;
    auth {
        # default: off
        enabled         on;
        username        admin;
        password        admin;
    }
}

Testing

curl http://admin:admin@ip:1985/api/v1/clients/

Alternatively, accessing it directly through the browser will prompt for entering a username and password.

Modification Plan
The original process is as follows:

graph LR
    A(SrsHttpConn) --> B[SrsHttpCorsMux] --> C[SrsHttpServeMux]

Loading

The new process adds SrsHttpAuthMux as follows:

graph LR
    A(SrsHttpConn) --> B[SrsHttpCorsMux] --> C[SrsHttpAuthMux] --> D[SrsHttpServeMux]
    style C fill: #09f, stroke: #333

Loading

Note:

1. Considering that API is for operations and maintenance, while streaming media is for users, these two passwords may be different., authentication is only performed for /api/v1/, while other endpoints such as RTC signaling /rtc/v1/ are not authenticated.
2. Of course, static pages will also not be authenticated, even if they share the same port with the API.

---

TRANS_BY_GPT3

[winlinvip]

After enabling authentication, will the Console prompt this popup? Check if there is a popup in the Console, as many people have reported that there is no authentication in the Console. Therefore, it would be good to have a popup, not having one might not be ideal.

Does this also apply to the RTC API? The RTC API belongs to the streaming media part, so if RTC is enabled, should HTTP-FLV also be enabled for consistency? The API is for operations and maintenance, while streaming media is for users, so the passwords for these two may be different.

The HTTP server and API can reuse the same port, so we may need to check if it will function properly.

TRANS_BY_GPT3

[winlinvip]

Please add black box testing and use Go as the client to verify if the auth is correct.

TRANS_BY_GPT3

[winlinvip]

I think it works for me now, please also remember to update the documentation for HTTP basic authentication at HTTP-API