lukefx/rack-ntlm

Rack module for NTLM Authentication

Hi there 👋

rack-ntlm's Issues

Doesn't work outside of rails

Thanks for writing this gem! I'm hacking it atm for use as a NTLM client test endpoint, so I'll put a few issues here to help with the development. I'll also credit you in the new gem. Here's the first one:

The :blank? method is provided by Rails, which breaks this gem when used outside of Rails.

No Actual Authentication?

By the looks of it, all this code is doing is getting the username out of the NTLM request and verifying it's existance in an LDAP directory. There is no actual authentication - anyone can spoof a username over ldap, in fact any browser that prompts for a username will allow a user to "authenticate" as anyone they want.

Am I missing something?

Rack::Ntlm defined as module in version.rb and class in ntlm.rb

Yep.