(MFC) HTTPS Windows Integrated Authentication

This example pertains to running on the Windows operating system only.

It provides guidance on how to send HTTP requests using the current logged-on Windows user credentials. This is where NTLM/Negotiate authentication is used, but the login/password credentials are not explicitly provided by the application, but are implicitly provided based on the Windows logged-on user (i.e. the Windows account for the running process).

Chilkat C/C++ Library Downloads MS Visual C/C++ Libs

See Also: Using MFC CString in Chilkat

#include <CkHttp.h>

void ChilkatSample(void)
    {
    CkString strOut;

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    CkHttp http;

    // Chilkat implements the NTLM protocol directly, which is how it can be used on non-Windows systems.
    // However, Chilkat can also optionally use Microsoft's SSPI (see https://docs.microsoft.com/en-us/windows/desktop/secauthn/ssp-packages-provided-by-microsoft) 
    // to allow for Windows Integrated Authentication.

    // Setting the HTTP Login equal to the empty string, and the Password equal to the keyword "default"
    // will cause Chilkat to use the Microsoft SSPI w/ integrated authentication.
    http.put_Login("");
    http.put_Password("default");

    // We can also explicitly indicate that NTLM or Negotiate authentication is to be used:
    http.put_NegotiateAuth(true);

    // Set various properties unrelated to authentication..
    // Automatically follow redirects.
    http.put_FollowRedirects(true);
    // Give verbose logging in the LastErrorText (in case there are errors)
    http.put_VerboseLogging(true);
    // Optionally log the exact session to a file (for debugging)
    http.put_SessionLogFilename("c:/someDir/session.txt");
    // Perhaps you wish to be seen as a browser on Mac OS X..
    http.put_UserAgent("Mozilla/5.0 (Windows NT; Windows NT 6.1; en-GB) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/7.0.500.0 Safari/534.6");

    // Note: If the result of authentication is to set Cookies that are used in subsequent requests,
    // then make sure Chilkat both saves and sends cookies: 
    http.put_SaveCookies(true);
    http.put_SendCookies(true);
    http.put_CookieDir("memory");

    // Send a GET request to a URL, using Windows Integrated Authentication...
    const char *responseStr = http.quickGetStr("https://somewhere.net/api/user");
    if (http.get_LastMethodSuccess() != true) {
        strOut.append(http.lastErrorText());
        strOut.append("\r\n");
        SetDlgItemText(IDC_EDIT1,strOut.getUnicode());
        return;
    }

    strOut.append("response status code = ");
    strOut.appendInt(http.get_LastStatus());
    strOut.append("\r\n");
    strOut.append("response header:");
    strOut.append("\r\n");
    strOut.append(http.lastHeader());
    strOut.append("\r\n");
    strOut.append("----");
    strOut.append("\r\n");
    strOut.append(responseStr);
    strOut.append("\r\n");


    SetDlgItemText(IDC_EDIT1,strOut.getUnicode());

    }