I am looking at this and this , and it would be "easy" to send the credentials in the URL. For instance:
http: // gooduser: secretpassword@www.example.com / webcallback? foo = bar
It is good and good, but it does not work. I turned on fiddler and the header was Authorizationnot sent for Chrome . Other browsers seem to have the same behavior (I have a breakpoint on the server and the Authorize header does not appear for Firefox, Safari or IE)
Authorization
How to make it better?
Stumbled upon this while exploring various basic versions of auth.
auth, 401 ( auth). , , , , auth.
401
- ( ) authorization:
authorization
curl 'http://gooduser:secretpassword@www.example.com/webcallback?foo=bar'
,
http://gooduser:secretpassword@www.example.com/webcallback?foo=bar
. , , . , hypen ( ), .