There are two authentication points:
- Ingress
- Egress
Ingress authentication is for incoming requests to the gateway and can be used to identify who is accessing the gateway.
Egress authentication is for upstream repositories, especially the ones that need authentication e.g. CodeArtifact, JFrog, Nexus etc.
Use htpasswd
to add users:
htpasswd -nbB user1 password1 >> ./config/gateway-auth-basic.txt
Enable authentication for upstream in config/gateway.json