feat(http,td,client): add BasicAuth to WoT TD + default client header (#112)

feat(http,td,client): add BasicAuth to WoT TD + default client header; tests & docs

- handlers: ThingDescriptionHandler.add_security_definitions() now emits TD.securityDefinitions & TD.security with Basic scheme
- TD model: supports security metadata generation
- client (HTTP): ObjectProxy attaches Authorization header on every request when username/password are provided
- tests: extend test_13_protocols_http for basic and basic-auth flows
- docs: README section on enabling Basic Auth + client usage (not updated it)

Author: 5h4rk-lab

.vscode/settings.json

@@ -1,6 +1,5 @@
 {
     "editor.rulers": [
-        80,120
     ],
     "editor.formatOnSave": true,
 }

hololinked/client/factory.py

@@ -0,0 +1,17 @@
+# run_testthing_basic.py
+import logging, time, uuid
+from tests.things.test_thing import TestThing
+from hololinked.server.security import BcryptBasicSecurity
+
+thing_id = f"tt-{uuid.uuid4().hex[:6]}"
+port = 60110
+sec = BcryptBasicSecurity(username="cliuser", password="clipass")
+
+thing = TestThing(id=thing_id, log_level=logging.INFO)
+thing.run_with_http_server(
+    forked=True, port=port, config={"allow_cors": True}, security_schemes=[sec]
+)
+
+print(f"TD: http://127.0.0.1:{port}/{thing_id}/resources/wot-td")
+print(f"Prop: http://127.0.0.1:{port}/{thing_id}/base-property")
+while True: time.sleep(5)

hololinked/client/http/consumed_interactions.py

@@ -703,6 +703,29 @@ def test_11_object_proxy_basic(self):
         self.assertEqual(object_proxy.read_property("integration_time"), 1200)
         self.stop_server(port=port, thing_ids=[thing_id])
 
+    def test_12_object_proxy_with_basic_auth(self):
+        security_scheme = BcryptBasicSecurity(username="cliuser", password="clipass")
+        port = 60013
+        thing_id = f"test-basic-proxy-{uuid.uuid4().hex[0:8]}"
+        thing = OceanOpticsSpectrometer(
+            id=thing_id, serial_number="simulation", log_level=logging.ERROR + 10
+        )
+        thing.run_with_http_server(
+            forked=True,
+            port=port,
+            config={"allow_cors": True},
+            security_schemes=[security_scheme],
+        )
+        time.sleep(2)
+
+        object_proxy = ClientFactory.http(
+            url=f"http://127.0.0.1:{port}/{thing_id}/resources/wot-td",
+            username="cliuser",
+            password="clipass",
+        )
+        self.assertEqual(object_proxy.read_property("max_intensity"), 16384)
+        self.stop_server(port=port, thing_ids=[thing_id])
+
     @classmethod
     def stop_server(cls, port, thing_ids: list[str] = [], **request_kwargs):
         session = requests.Session()