feat: PUT/DELETE requests do not need basic auth

README.md

@@ -57,7 +57,7 @@ user1 = "passwd1"
 user2 = "passwd2"
 ```
 
-Now every access to PUT or POST request, and every access to the index page, requires an HTTP basic auth with the user-password pair listed above. For example: 
+Now every access to POST request, and every access to static pages, requires an HTTP basic auth with the user-password pair listed above. For example:
 
 ```shell
 $ curl example-pb.com

src/index.js

@@ -61,9 +61,11 @@ async function handleNormalRequest(request, env, ctx) {
 }
 
 async function handlePostOrPut(request, env, ctx, isPut) {
-  const authResponse = verifyAuth(request, env)
-  if (authResponse !== null) {
-    return authResponse
+  if (!isPut) {  // only POST requires auth, since PUT request already contains auth
+    const authResponse = verifyAuth(request, env)
+    if (authResponse !== null) {
+      return authResponse
+    }
   }
 
   const contentType = request.headers.get("content-type") || ""