htaccess htpasswd issue

[gribs]

Hi

I can't put a htaccess with htpasswd for the espocrm directory
if i do this, I have an error 500

(I added just lines needed in espocrm htaccess, i didnt delete the espocrm htaccess)

have you an idea to fix this please?

[tarasm]

Please check if your htpasswd syntax in the .htaccess is correct.

[gribs]

Hi,

The syntax of .htaccess is

"AuthName "Protected"
AuthType Basic
AuthUserFile "/public_html/site/passwd/.htpasswd"
Require valid-user"

And in the .htpasswd is

usernameasswordsha1crypted

so I don't know what is wrong

[tarasm]

Are you sure that your hosting provides support htpasswd. E.g. in cPanel you can do it via "Password Protect Directories" menu.

[gribs]

Hi
Yes, it works with another script on the same vps server

[mmcdonald]

Has this been fixed? .. Having same issue.... only happen with ESPO

[tarasm]

Espo doesn't support Basic Authorization with .htpasswd. Why? Because, EspoCRM designed as a single page application with RESTful API. So EspoCRM already uses Basic Authorization for internal authorization in the system.

[dev77]

I tried to add a .htpasswd to my Espocrm directory and I get the 500 Internal Server Error. The above post is five years old. Is it still accurate? We can't use .htpasswd to add some extra security?

[shalmaxb]

Have a look here: https://docs.espocrm.com/administrat...configuration/