Page with Basic Authentication does not seem to work

Hi,

thanks for your tool!

If I add waf to the webroot and enable redirection with given .htaccess rules it starts to work fine. Up to the moment I request a page with basic authentication, i.e.

header('WWW-Authenticate: Basic realm="My realm"');
header('HTTP/1.0 401 Unauthorized');
die("access denied");

The browser gets the document showing the "access denied" message with http status code 200 (instead 401). And then no user + password dialog opens. It can happen, if content is sent (afterwards header() does not work).

Is there a configuration error on my site or is it a bug?

Thanks for your help!
Axel

Hi,
Really W.A.F. proxy return only with 200,302 codes request for now.
So if page not get redirect (302), returns code 200

Thank you for your feedback and example.
Very soon I'll make update about bug.

I fixed about different HTTP codes.
Please update from github, you can change only waf.php file
Please notify my if problem resolved or still exists.