{"record":{"id":"3575359187530b34","repo":"caddyserver/caddy","slug":"account-d-username-and-password-are-required","errorCode":null,"errorMessage":"account %d: username and password are required","messagePattern":"account (.+?): username and password are required","errorType":"validation","errorClass":null,"httpStatus":null,"severity":"error","filePath":"modules/caddyhttp/caddyauth/basicauth.go","lineNumber":113,"sourceCode":"\t// if supported, generate a fake password we can compare against if needed\n\tif hasher, ok := hba.Hash.(Hasher); ok {\n\t\thba.fakePassword = hasher.FakeHash()\n\t}\n\n\trepl := caddy.NewReplacer()\n\n\t// load account list\n\thba.Accounts = make(map[string]Account)\n\tfor i, acct := range hba.AccountList {\n\t\tif _, ok := hba.Accounts[acct.Username]; ok {\n\t\t\treturn fmt.Errorf(\"account %d: username is not unique: %s\", i, acct.Username)\n\t\t}\n\n\t\tacct.Username = repl.ReplaceAll(acct.Username, \"\")\n\t\tacct.Password = repl.ReplaceAll(acct.Password, \"\")\n\n\t\tif acct.Username == \"\" || acct.Password == \"\" {\n\t\t\treturn fmt.Errorf(\"account %d: username and password are required\", i)\n\t\t}\n\n\t\t// TODO: Remove support for redundantly-encoded b64-encoded hashes\n\t\t// Passwords starting with '$' are likely in Modular Crypt Format,\n\t\t// so we don't need to base64 decode them. But historically, we\n\t\t// required redundant base64, so we try to decode it otherwise.\n\t\tif strings.HasPrefix(acct.Password, \"$\") {\n\t\t\tacct.password = []byte(acct.Password)\n\t\t} else {\n\t\t\tacct.password, err = base64.StdEncoding.DecodeString(acct.Password)\n\t\t\tif err != nil {\n\t\t\t\treturn fmt.Errorf(\"base64-decoding password: %v\", err)\n\t\t\t}\n\t\t}\n\n\t\thba.Accounts[acct.Username] = acct\n\t}\n\thba.AccountList = nil // allow GC to deallocate","sourceCodeStart":95,"sourceCodeEnd":131,"githubUrl":"https://github.com/caddyserver/caddy/blob/50e54ee279aa1e504fe218ca49ab6ae16c100410/modules/caddyhttp/caddyauth/basicauth.go#L95-L131","documentation":"Error \"account %d: username and password are required\" thrown in caddyserver/caddy.","triggerScenarios":"Thrown at modules/caddyhttp/caddyauth/basicauth.go:113 when the library encounters an invalid state.","commonSituations":"See trigger scenarios.","solutions":["Provide both a username and a hashed password for each basic_auth account in the configuration."],"exampleFix":null,"handlingStrategy":null,"validationCode":null,"typeGuard":null,"tryCatchPattern":null,"preventionTips":[],"tags":[],"backgroundTag":null,"analyzedSha":"50e54ee279aa1e504fe218ca49ab6ae16c100410","analyzedAt":"2026-08-15T09:20:21.641Z","schemaVersion":2},"datasetVersion":"2026-08-15T22:17:37.221Z"}