const char* expected_user = std::getenv("BASIC_USER");

const char* expected_pass = std::getenv("BASIC_PASS");

if (!expected_user || !expected_pass) {

std::cerr << "basic_authentication: BASIC_USER and BASIC_PASS "

"environment variables must be set.\n";

return 1;

}

httpserver::webserver ws{httpserver::create_webserver(8080)};

ws.on_get("/hello", [expected_user, expected_pass]

(const httpserver::http_request& req) {

if (req.get_user() != expected_user || req.get_pass() != expected_pass) {

return httpserver::http_response::unauthorized(

"Basic", "test@example.com", "FAIL");

}

// Only echo the username — never reflect the password back to the client.

return httpserver::http_response::string(

"Hello, " + std::string(req.get_user()) + "!");

});

ws.start(true);

return 0;