dotnet xml: MSXML2.XMLHTTP username and password encoding -- dotnet xml

MSXML2.XMLHTTP username and password encoding

rick NO[at]SPAM oyarsa.com
12/30/2003 11:28:37 AM

dotnet xml:

I'm working on a project where we have to call up a URL from a Java
servlet - the only sample call we have is some Javascript that used an
MSXML2.XMLHTTP object to send the request, using a username and
password.

How is the username and password actually passed to the target web
server for the request (via MSXML2.XMLHTTP)? That is, are they sent
as HTTP header fields? Are they sent as query parameters? Are they
sent as part of the URL? Are they encoded or encrypted?

I'e already spent a fair amount of time trying to find this out in the
doc and on the 'net, but I'm not finding this level of detail.

Thanks for any insight.

Regards,

RE: MSXML2.XMLHTTP username and password encoding

Rick R.
12/31/2003 7:14:19 AM

Hi Kevin-
Thanks for the reply - do you know the names of the HTTP
header fields?

Thanks again,
Regards,
Rick

[quoted text, click to view]

RE: MSXML2.XMLHTTP username and password encoding

v-kevy NO[at]SPAM online.microsoft.com
12/31/2003 8:53:48 AM

Hi Rick,

The MSXML2.XMLHTTP is the same as Http. The username and password are in
the HTTP header fields. Whether the username and password are encrypted
depends on the server. If it uses BASIC authentication, they're not
encrypted.

Kevin Yu
=======
"This posting is provided "AS IS" with no warranties, and confers no
rights."

Re: MSXML2.XMLHTTP username and password encoding

Martin Honnen
12/31/2003 5:51:07 PM

[quoted text, click to view]

Look at
ftp://ftp.isi.edu/in-notes/rfc2617.txt
it describes HTTP authentication, basically when a page is requested and
authentication is required the server sends a
401 Unauthrorized
WWW-Autenticate: scheme params
and the client is supposed to answer with
Authorization: scheme credentials
where it depends on the scheme whether password are encrypted.
--

Martin Honnen
http://JavaScript.FAQTs.com/

RE: MSXML2.XMLHTTP username and password encoding

v-kevy NO[at]SPAM online.microsoft.com
1/2/2004 3:48:30 AM

Hi Rick,

Please try to check the following link for reference:

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/act/htm/act
ml_ref_href.asp

Happy New Year!

Kevin Yu
=======
"This posting is provided "AS IS" with no warranties, and confers no
rights."

Got something to say? Click here to post a reply to this thread.

Don't see what you're looking for? Try a search.

View other messages in the dotnet xml group.