update basic auth check

app/views/middlewhere.py

@@ -10,28 +10,30 @@ log = logging.getLogger(__name__)
 
 
 def _do_basic_auth_check(request):
+    if "download_" not in request.match_info.route.name:
+        return
+
+    auth = None
     auth_header = request.headers.get(hdrs.AUTHORIZATION)
-    if not auth_header:
+    if auth_header is not None:
-        if "download_" in request.match_info.route.name:
+        try:
+            auth = BasicAuth.decode(auth_header=auth_header)
+        except ValueError:
+            pass
+
+    if auth is None:
+        try:
+            auth = BasicAuth.from_url(request.url)
+        except ValueError:
+            pass
+
+    if not auth:
         return Response(
             body=b"",
             status=401,
             reason="UNAUTHORIZED",
-                headers={
+            headers={hdrs.WWW_AUTHENTICATE: 'Basic realm=""'},
-                    hdrs.WWW_AUTHENTICATE: 'Basic realm=""',
-                    hdrs.CONTENT_TYPE: "text/html; charset=utf-8",
-                    hdrs.CONNECTION: "keep-alive",
-                },
         )
-        return
-
-    try:
-        auth = BasicAuth.decode(auth_header=auth_header)
-    except ValueError:
-        auth = None
-
-    if not auth:
-        return
 
     if auth.login is None or auth.password is None:
         return