DataFlex

HTTPS Windows Integrated Authentication

See more HTTP Examples

This example pertains to running on the Windows operating system only.

It provides guidance on how to send HTTP requests using the current logged-on Windows user credentials. This is where NTLM/Negotiate authentication is used, but the login/password credentials are not explicitly provided by the application, but are implicitly provided based on the Windows logged-on user (i.e. the Windows account for the running process).

DataFlex

Use ChilkatAx-win32.pkg

Procedure Test
    Handle hoHttp
    String sResponseStr
    String sTemp1
    Integer iTemp1
    Boolean bTemp1

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    Get Create (RefClass(cComChilkatHttp)) To hoHttp
    If (Not(IsComObjectCreated(hoHttp))) Begin
        Send CreateComObject of hoHttp
    End

    // Chilkat implements the NTLM protocol directly, which is how it can be used on non-Windows systems.
    // However, Chilkat can also optionally use Microsoft's SSPI (see https://docs.microsoft.com/en-us/windows/desktop/secauthn/ssp-packages-provided-by-microsoft) 
    // to allow for Windows Integrated Authentication.

    // Setting the HTTP Login equal to the empty string, and the Password equal to the keyword "default"
    // will cause Chilkat to use the Microsoft SSPI w/ integrated authentication.
    Set ComLogin Of hoHttp To ""
    Set ComPassword Of hoHttp To "default"

    // We can also explicitly indicate that NTLM or Negotiate authentication is to be used:
    Set ComNegotiateAuth Of hoHttp To True

    // Set various properties unrelated to authentication..
    // Automatically follow redirects.
    Set ComFollowRedirects Of hoHttp To True
    // Give verbose logging in the LastErrorText (in case there are errors)
    Set ComVerboseLogging Of hoHttp To True
    // Optionally log the exact session to a file (for debugging)
    Set ComSessionLogFilename Of hoHttp To "c:/someDir/session.txt"
    // Perhaps you wish to be seen as a browser on Mac OS X..
    Set ComUserAgent Of hoHttp To "Mozilla/5.0 (Windows NT; Windows NT 6.1; en-GB) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/7.0.500.0 Safari/534.6"

    // Note: If the result of authentication is to set Cookies that are used in subsequent requests,
    // then make sure Chilkat both saves and sends cookies: 
    Set ComSaveCookies Of hoHttp To True
    Set ComSendCookies Of hoHttp To True
    Set ComCookieDir Of hoHttp To "memory"

    // Send a GET request to a URL, using Windows Integrated Authentication...
    Get ComQuickGetStr Of hoHttp "https://somewhere.net/api/user" To sResponseStr
    Get ComLastMethodSuccess Of hoHttp To bTemp1
    If (bTemp1 <> True) Begin
        Get ComLastErrorText Of hoHttp To sTemp1
        Showln sTemp1
        Procedure_Return
    End

    Get ComLastStatus Of hoHttp To iTemp1
    Showln "response status code = " iTemp1
    Showln "response header:"
    Get ComLastHeader Of hoHttp To sTemp1
    Showln sTemp1
    Showln "----"
    Showln sResponseStr


End_Procedure