> Fetch clean Markdown by appending `.md` to any page URL under https://signalwire.com/docs or requesting it with the HTTP header `Accept: text/markdown`. The root index at https://signalwire.com/docs/llms.txt lists the available documentation indexes.

# validate_basic_auth

> Validate HTTP Basic Auth credentials against the agent's stored credentials.

Validate a username/password pair against the agent's configured Basic Auth
credentials. The comparison uses constant-time `hmac.compare_digest` to prevent
timing attacks.

> **Note**
>
> This method is an **override point**. Subclasses can replace it with custom
> authentication logic (e.g., database lookups, external identity providers) while
> the rest of the auth pipeline (`_check_basic_auth`, `_check_cgi_auth`, etc.)
> continues to call it transparently.

## **Parameters**

**`username`** `str` — required

Username extracted from the incoming request's `Authorization` header.

---

**`password`** `str` — required

Password extracted from the incoming request's `Authorization` header.

---

## **Returns**

`bool` -- `True` if the credentials are valid, `False` otherwise. Returns `False`
when no credentials have been configured on the agent.

## **Examples**

### Default behavior

```python {4}
from signalwire import AgentBase

agent = AgentBase(name="assistant", route="/assistant")
is_valid = agent.validate_basic_auth("admin", "secret123")
```

### Custom validation in a subclass

```python {4}
from signalwire import AgentBase

class SecureAgent(AgentBase):
    def validate_basic_auth(self, username: str, password: str) -> bool:
        """Look up credentials in an external user store."""
        from myapp.auth import verify_user
        return verify_user(username, password)
```

> Validate HTTP Basic Auth credentials against the agent's stored credentials.