Digest authentication

[rullbandspelare]

Can I do Digest authentication with HTTPRequest> ?
I know Basic authentication is just http://user:pass@host.
But how to do Digest authentication?


Thanks!

[Marcus Tettmar]

If by digest authentication, you mean creating a hash of some parameters, maybe hashing the method and URL as well then, yes, of course. With HTTP you can GET or POST any values. Macro Scheduler has MD5 and SHA256 hashing methods built in as well.

[rullbandspelare]

Ok. I take it that digest authentication is not built in to the HTTPRequest command.
Digest authentication is a standardized way to HTTP authenticate and is different from basic authentication in that it is a challenge response. BAsig is just user and password in plain text (base64) .

I am not sure on how to do this. It requires to read and write to the http header

[Marcus Tettmar]

Digest authentication is not something built into http. Therefore it's not something built into httprequest. Digest authentication implies hashing credentials and other stuff together, to make a one way hash which can only be verified by people knowing the things it was hashed with. Whether it is also used with HTTPRequest or not.

Look at the MD5 and SHA256 functions, as well as Base64.

[rullbandspelare]

A litle request
Have been looking for a solution for this. And I can not make it happen in Machro Scheduler.

Digest Authentication is something that is built in to a webbrowser client and is the way to authenticating without sending user/pass in clear text (base64) without TLS.

So, a welcome functionality to the HTTPRequest client would be this.

Thanks!

[Marcus Tettmar]

Usually the digest is sent in a header. You can do that with HTTPRequest. You can set custom headers with the HTTP_CUSTOM_HEADERS variable. See help file or here.

E.g.:

Let>HTTP_CUSTOM_HEADERS=Authorization: bearer SECRET_PASSWORD%CRLF%Accept: application/json

If you need to hash/sha256/base64 the value to make a digest/token, then you can do that too. Macro Scheduler has SH256 and BASE64 functions.

Hard to help further without seeing the actual specifications of the Endpoint you are trying to consume.