621 questions
0
votes
0
answers
50
views
How to make "hg clone" with hggit use the .netrc for HTTP authentication?
I have a remote Git repository that is to be accessed via HTTPS with basic auth, whose credentials are properly configured in my ~/.netrc, e.g.
$ cat ~/.netrc
machine example.com login example-user ...
0
votes
1
answer
86
views
Generating the same SHA-256 code_challenge as Postman using Java
When working on new HTTP request in Postman v11.2.14-canary01, and going to the Authorization tab and selecting SHA-256 for the Code Challenge Method and putting
...
1
vote
0
answers
217
views
Zabbix 6.0.20 anable HTTP authentication
I'm trying to enable HTTP authentication for my zabbix server 6.0.20.
I have an EC2 instance running on AWS, and I configured ALB using Cognito authentication.
I updated the files /etc/nginx/conf.d/...
6
votes
2
answers
1k
views
Is it possible to create a Git helper or plugin that adds HTTP headers or forces Bearer Token authentication
Background: We use Bitbucket Server (soon to upgrade/switch to Bitbucket DataCenter). In our authentication setup, we have user passwords disabled (web auth is via a different means), so for Bitbucket/...
0
votes
1
answer
382
views
How to unset $_SERVER['PHP_AUTH_USER'] and $_SERVER['PHP_AUTH_PW'] in PHP 7.3
I installed APC status page script on my server to see APC status. This lets you set a username and password via HTTP Authentication to view more detailed information.
Once logged in via HTTP ...
1
vote
1
answer
490
views
Sending Private access token (PAT) in Authentication header to download an archive for a private GitHub repository in Inno Setup script
I'm writing an install script that's supposed to download a private repository from GitHub:
if Pat <> '' then
begin
Pat := Pat + '@'
end;
Url := Format('https://%sgithub.com/<MY_REPO>/%...
0
votes
1
answer
253
views
How to login to liferay website using JMeter
I am facing one problem that i am unable to login to the liferay website using JMeter.
The problem i know already but don't know how to hanmdle it.
I get to know that "p_auth" token is ...
0
votes
1
answer
690
views
I cant use multiple credentials on JMeter Authorization Manager on the same Test Case
I am trying to simulate a scenario where two different users(with different credentials) log in simultaneously. This simulation will continue in a controlled number of iterations loop.
I am using the ...
5
votes
1
answer
1k
views
FastAPI auth check before granting access to sub-applications
I am mounting a Flask app as a sub-application in my root FastAPI app, as explained in the documentation
Now I want to add an authentication layer using HTTPAuthorizationCredentials dependency, as ...
0
votes
1
answer
923
views
Why does Quarkus ignore my HttpAuthenticationMechanism but not my ContainerRequestFilter?
I have a custom security module for Java EE applications. It follows the JSR-375 specification and it provides its own IdentityStore, as well as a custom HttpAuthenticationMechanism* and a ...
0
votes
1
answer
1k
views
RestSharp Digest Authenticator is not working
I'm sending a POST request using RestSharp in C# which requires digest authentication (using package RestSharp.Authenticators.Digest).
When I use
client.Authenticator = new DigestAuthenticator("...
0
votes
3
answers
440
views
Failed to keep logged in angular when using php backend
I'm trying to make a login system on angular with a PhP backend.
When people login, this is the PhP script called :
// here check for good request
$account = // found the account thanks to PDO
$...
0
votes
1
answer
660
views
How to direct user to a login page instead of a login popup in Flask HTTPBasicAuth?
What is the correct way of using HTTPBasicAuth to redirect to a login page? As of now, it always takes me to the verify_password function, and I'm shown a popup asking for username and password. ...
0
votes
1
answer
300
views
How to give user the browser's native auth dialog from javascript without refreshing the whole page?
I really like the browser's native auth dialog. Not something written in html form, but the dialog the browser shows for "WWW-Authenticate: Digest" header etc. Now I want to give user this ...
1
vote
0
answers
144
views
SOAP-Server C++/Delphi: How can I clear previous authentication?
I have a SOAP-Server (created with WebServer Wizard in C++Builder 10.3).
I use HTTP Basic Authentication to login. I can see and check user/password either in TIdHTTPWebBrokerBridge::...
0
votes
2
answers
1k
views
How do you have multiple tokens for HTTP POST Authorization?
An HTTP GET returned:
"Access-Token": "<Long Hex Access Token>",
"Refresh-Token": "<Long Hex Refresh Token>"
I need to send those in the header as ...
0
votes
1
answer
468
views
How to Resolve Status 401 in HTTP Post Request Python?
I am trying to make an http post request in Python. The http that I am posting to requires an authorization. For security, I have replaced the real url, data and authorization. When I run the code ...
1
vote
1
answer
240
views
Why the authentication scheme of GitHub Oauth2 Authorization header is 'token' not 'Bearer'?
According to the RFC6750, the HTTP Authentication Scheme should be 'Bearer'. But this GitHub doc uses 'token' as the scheme. I've tried both and it seems that both of those two are working.
My ...
0
votes
0
answers
268
views
Access on http authentication secured image in all browsers with Spring
I have the following problem:
I want to access a picutre (Motion Stream on Raspberry Pi) which is secured by http authentication.
To don't show the password in plain html code, I use this in html:
<...
0
votes
2
answers
2k
views
Consuming get API in nodejs with authentication using https
How can I send Id and password means basic authentication to below code. I mean where I need to put id/pass in below code? My API needs basic authentication
const https = require('https');
https.get(...
2
votes
2
answers
1k
views
In Azure Logic Apps, How to make a HTTP Get/Post Call with NTLM Authentication?
I am trying to make a HTTP (Get/Post) call in Azure Logic Apps ?
The called service is on-premise (it's in fact a webservice) and it supports NTLM Authentication.
I can reach the service via postman (...
2
votes
2
answers
717
views
Twilio HTTP Authentication for programmable sms status callback urls
I want to use HTTP basic authentication to password protect the status callback endpoint for programmable sms. On the initial request from Twilio, which does not have a Authorization header, I send ...
2
votes
1
answer
1k
views
Google cloud functions http authentication
I am new to google cloud functions and try to restrict access to my function by only requests from dialogflow webhooks. I see two options in gcloud console: allow unauthenticated requests and restrict ...
0
votes
1
answer
121
views
Strange problem after server migration with MS Edge / Trac
I have just moved our Trac environment from one server to another. They are both running Ubuntu 18.04 with Trac 1.2.5 on Apache.
I use account manager with .htdigest authentification.
With Firefox, ...
0
votes
1
answer
121
views
HTTP Auth vs Complex URL
Imagine I need to provide a secure endpoint with private data. Consider user1 with password1234. Is there any difference in security between:
https://website.com/myendpoint/user1/password1234
https://...