basic

Use basic when an API authenticates with HTTP Basic — it base64-encodes user:pass and sets the Authorization: Basic … header, with both halves resolved at call time so the caller never holds the credential.

Example

import { basic, env, stitch } from 'stitchapi';

const report = stitch({
    baseUrl: 'https://api.example.com',
    path: '/report',
    auth: basic({ user: env('API_USER'), pass: env('API_PASS') }),
});

Each call to report() resolves API_USER and API_PASS, encodes them, and attaches the header — behind the capability boundary, so the credential is never passed in by the caller.

Options

user and pass each take a string or a resolver. Prefer a resolver like env(): it reads the secret per call, so nothing is captured in the config or committed to source — the capability, not credential boundary. A literal string works but bakes the secret into the stitch. See Reference → Auth strategies for every field.

See also