area: security
issue:
- https://github.com/istio/enhancements/pull/112
releaseNotes:
- |
  **Promoted** the authorization policy dry-run mode to alpha.
docs:

)

// fakeKeyring is a fake docker auth config keyring
type fakeKeyring struct {
	auth []credentialprovider.AuthConfig
	ok   bool
}

// Lookup implements the DockerKeyring method for fetching credentials based on image name.
// Returns fake results based on the auth and ok fields in fakeKeyring
func (f *fakeKeyring) Lookup(image string) ([]credentialprovider.AuthConfig, bool) {
	return f.auth, f.ok
}

    }

    def "can add multiple authentication schemes with common supertype"() {
        when:
        container.create('auth1', auth1)
        container.create('auth2', auth2)

        then:
        container.size() == 2

        where:
        auth1                    | auth2
        TestAuthentication       | CustomTestAuthentication
        CustomTestAuthentication | TestAuthentication
    }

		useExtended bool
	}{
		{
			name: "@request.auth.claims",
		},
		{
			name: "@request.auth.claims-",
		},
		{
			name: "request.auth.claims.",
		},
		{
			name: "@request.auth.claims.",
		},
		{
			name: "@request.auth.claims-abc",
		},
		{
			name: "x-some-other-header",
		},
		{
			name: "@request.auth.claims.key1",

### API Change

Cici Huang <******@****.***> 1667856596 +0000

                description: |-
                  Determines where in the filter chain this `WasmPlugin` is to be injected.

                  Valid Options: AUTHN, AUTHZ, STATS
                enum:
                - UNSPECIFIED_PHASE
                - AUTHN
                - AUTHZ
                - STATS
                type: string
              pluginConfig:

Mikalai Radchuk <******@****.***> 1714565943 +0200

				Email:    "******@****.***",
			},
			fail: false,
		},

		// auth field decodes to username & password
		{
			input: []byte(`{"auth": "Zm9vOmJhcg==", "email": "******@****.***"}`),
			expect: DockerConfigEntry{
				Username: "foo",
				Password: "bar",
				Email:    "******@****.***",
			},
			fail: false,
		},

		// auth field overrides username & password
		{
			// Fake values for testing.

# HTTP 基础授权

最简单的用例是使用 HTTP 基础授权（HTTP Basic Auth）。

在 HTTP 基础授权中，应用需要请求头包含用户名与密码。

如果没有接收到 HTTP 基础授权，就返回 HTTP 401 `"Unauthorized"` 错误。

并返回含 `Basic` 值的请求头 `WWW-Authenticate`以及可选的 `realm` 参数。

HTTP 基础授权让浏览器显示内置的用户名与密码提示。

输入用户名与密码后，浏览器会把它们自动发送至请求头。

## 简单的 HTTP 基础授权

* 导入 `HTTPBasic` 与 `HTTPBasicCredentials`
* 使用 `HTTPBasic` 创建**安全概图**
* 在*路径操作*的依赖项中使用 `security`
* 返回类型为 `HTTPBasicCredentials` 的对象：