HTTP auth is not an authentication system, it only describes how credentials should be passed from the client to the server and how the server should respond to them.