feat: add HTTP basic authentication support for monitors (#3033)

## Changes
- Add basicAuthUser and basicAuthPassword fields to Monitor model, types, and validation (server + client)
- Update networkService to send Authorization: Basic header when credentials are provided
- Add basic auth form fields (username/password) to the create/edit monitor page for HTTP monitors
- Add i18n strings for the new basic authentication section

## Benefits
- Users can monitor endpoints protected by HTTP basic authentication
- Credentials are sent as standard Authorization: Basic base64-encoded header
- Basic auth is only used when bearer token (secret) is not configured

server/src/db/models/Monitor.ts

@@ -93,6 +93,12 @@ const MonitorSchema = new Schema<MonitorDocument>(
 			type: String,
 			enum: ["equal", "include", "regex", ""],
 		},
+		basicAuthUser: {
+			type: String,
+		},
+		basicAuthPassword: {
+			type: String,
+		},
 		url: {
 			type: String,
 			required: true,

server/src/service/infrastructure/networkService.ts

@@ -296,7 +296,7 @@ class NetworkService implements INetworkService {
 	}
 
 	private async requestHttp<T = unknown>(monitor: Monitor): Promise<MonitorStatusResponse<T>> {
-		const { url, secret, ignoreTlsErrors, useAdvancedMatching, jsonPath, matchMethod, expectedValue } = monitor;
+		const { url, secret, ignoreTlsErrors, useAdvancedMatching, jsonPath, matchMethod, expectedValue, basicAuthUser, basicAuthPassword } = monitor;
 		const httpResponse = this.buildStatusResponse<T>({
 			monitor,
 			overrides: {
@@ -310,8 +310,15 @@ class NetworkService implements INetworkService {
 			if (!url) {
 				throw new Error("Monitor URL is required");
 			}
+			const headers: Record<string, string> = {};
+			if (secret) {
+				headers["Authorization"] = `Bearer ${secret}`;
+			} else if (basicAuthUser) {
+				const credentials = Buffer.from(`${basicAuthUser}:${basicAuthPassword || ""}`).toString("base64");
+				headers["Authorization"] = `Basic ${credentials}`;
+			}
 			const config: Record<string, unknown> = {
-				headers: secret ? { Authorization: `Bearer ${secret}` } : undefined,
+				headers: Object.keys(headers).length > 0 ? headers : undefined,
 			};
 
 			if (ignoreTlsErrors) {

server/src/types/monitor.ts

@@ -27,6 +27,8 @@ export interface Monitor {
 	jsonPath?: string;
 	expectedValue?: string;
 	matchMethod?: MonitorMatchMethod;
+	basicAuthUser?: string;
+	basicAuthPassword?: string;
 	url: string;
 	port?: number;
 	isActive: boolean;

server/src/validation/monitorValidation.ts

@@ -70,6 +70,8 @@ export const createMonitorBodyValidation = z.object({
 	jsonPath: z.union([z.string(), z.literal("")]).optional(),
 	expectedValue: z.union([z.string(), z.literal("")]).optional(),
 	matchMethod: z.union([z.string(), z.null(), z.literal("")]).optional(),
+	basicAuthUser: z.union([z.string(), z.literal("")]).optional(),
+	basicAuthPassword: z.union([z.string(), z.literal("")]).optional(),
 	gameId: z.union([z.string(), z.literal("")]).optional(),
 	grpcServiceName: z.union([z.string(), z.literal("")]).default(""),
 	selectedDisks: z.array(z.string()).optional(),
@@ -94,6 +96,8 @@ export const editMonitorBodyValidation = z.object({
 	jsonPath: z.union([z.string(), z.literal("")]).optional(),
 	expectedValue: z.union([z.string(), z.literal("")]).optional(),
 	matchMethod: z.union([z.string(), z.null(), z.literal("")]).optional(),
+	basicAuthUser: z.union([z.string(), z.literal("")]).optional(),
+	basicAuthPassword: z.union([z.string(), z.literal("")]).optional(),
 	port: z.number().min(1).max(65535).optional(),
 	cpuAlertThreshold: z.number().optional(),
 	memoryAlertThreshold: z.number().optional(),