SyntaxFix

[authentication] Authentication issues with WWW-Authenticate: Negotiate

Putting this information here for future readers' benefit.

  • 401 (Unauthorized) response header -> Request authentication header

  • Here are several WWW-Authenticate response headers. (The full list is at IANA: HTTP Authentication Schemes.)

    • WWW-Authenticate: Basic-> Authorization: Basic + token - Use for basic authentication
    • WWW-Authenticate: NTLM-> Authorization: NTLM + token (2 challenges)
    • WWW-Authenticate: Negotiate -> Authorization: Negotiate + token - used for Kerberos authentication
      • By the way: IANA has this angry remark about Negotiate: This authentication scheme violates both HTTP semantics (being connection-oriented) and syntax (use of syntax incompatible with the WWW-Authenticate and Authorization header field syntax).

You can set the Authorization: Basic header only when you also have the WWW-Authenticate: Basic header on your 401 challenge.

But since you have WWW-Authenticate: Negotiate this should be the case for Kerberos based authentication.

Examples related to authentication

• Set cookies for cross origin requests • How Spring Security Filter Chain works • What are the main differences between JWT and OAuth authentication? • http post - how to send Authorization header? • ASP.NET Core Web API Authentication • Token based authentication in Web API without any user interface • Custom Authentication in ASP.Net-Core • Basic Authentication Using JavaScript • Adding ASP.NET MVC5 Identity Authentication to an existing project • LDAP: error code 49 - 80090308: LdapErr: DSID-0C0903A9, comment: AcceptSecurityContext error, data 52e, v1db1 • No 'Access-Control-Allow-Origin' header in Angular 2 app • How to add header row to a pandas DataFrame • How can I make sticky headers in RecyclerView? (Without external lib) • Adding header to all request with Retrofit 2 • Python Pandas Replacing Header with Top Row • Request header field Access-Control-Allow-Headers is not allowed by Access-Control-Allow-Headers • Pythonically add header to a csv file • fatal error C1010 - "stdafx.h" in Visual Studio how can this be corrected? • correct PHP headers for pdf file download • How to fix a header on scroll

Examples related to http-headers

• Set cookies for cross origin requests • Adding a HTTP header to the Angular HttpClient doesn't send the header, why? • Passing headers with axios POST request • What is HTTP "Host" header? • CORS error :Request header field Authorization is not allowed by Access-Control-Allow-Headers in preflight response • Using Axios GET with Authorization Header in React-Native App • Axios get access to response header fields • Custom header to HttpClient request • Send multipart/form-data files with angular using $http • Best HTTP Authorization header type for JWT

Examples related to http-authentication

• Basic HTTP authentication with Node and Express 4 • CURL to access a page that requires a login from a different page • Authentication issues with WWW-Authenticate: Negotiate • How to set the authorization header using curl • How to do HTTP authentication in android?