(Delphi ActiveX) HTTP Digest-MD5 Authentication Testing with httpbin.org

The URL https://httpbin.org/digest-auth/auth/user/passwd is password protected with user="user" and password="passwd". It requires Digest-MD5 authentication. Chilkat will automatically handle Digest-MD5 authentication as required by the server response. In this case, however, the server will fail the authentication unless a Cookie is included in the request. The cookie can have any name and any value. (Yes, this is ridiculous, and many developers have probably spent countless hours assuming their Digest-MD5 implementations were incorrect.)

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
http: TChilkatHttp;
strResponse: WideString;
status: Integer;

begin
// This example assumes the Chilkat HTTP API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := TChilkatHttp.Create(Self);

http.Login := 'user';
http.Password := 'passwd';

// Add a cookie to satisfy httpbin.org's desire for cookies..
// Otherwise, it will fail the perfectly valid Digest-MD5 authentication.
http.SetRequestHeader('Cookie','something="something"');

strResponse := http.QuickGetStr('https://httpbin.org/digest-auth/auth/user/passwd');
if (http.LastMethodSuccess = 0) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add(strResponse);

status := http.LastStatus;
Memo1.Lines.Add('response status code = ' + IntToStr(status));

// The output of this program is:
// 
// 	{ 
// 	  "authenticated": true, 
// 	  "user": "user"
// 	} 
// 
// 	response status code = 200
end;