(Delphi ActiveX) HTTPS Windows Integrated Authentication

This example pertains to running on the Windows operating system only.

It provides guidance on how to send HTTP requests using the current logged-on Windows user credentials. This is where NTLM/Negotiate authentication is used, but the login/password credentials are not explicitly provided by the application, but are implicitly provided based on the Windows logged-on user (i.e. the Windows account for the running process).

Chilkat for Delphi Downloads Chilkat ActiveX DLL for Delphi Chilkat non-ActiveX DLL for Delphi * The examples here use the ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Chilkat_TLB;

...

procedure TForm1.Button1Click(Sender: TObject);
var
http: TChilkatHttp;
responseStr: WideString;

begin
// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := TChilkatHttp.Create(Self);

// Chilkat implements the NTLM protocol directly, which is how it can be used on non-Windows systems.
// However, Chilkat can also optionally use Microsoft's SSPI (see https://docs.microsoft.com/en-us/windows/desktop/secauthn/ssp-packages-provided-by-microsoft) 
// to allow for Windows Integrated Authentication.

// Setting the HTTP Login equal to the empty string, and the Password equal to the keyword "default"
// will cause Chilkat to use the Microsoft SSPI w/ integrated authentication.
http.Login := '';
http.Password := 'default';

// We can also explicitly indicate that NTLM or Negotiate authentication is to be used:
http.NegotiateAuth := 1;

// Set various properties unrelated to authentication..
// Automatically follow redirects.
http.FollowRedirects := 1;
// Give verbose logging in the LastErrorText (in case there are errors)
http.VerboseLogging := 1;
// Optionally log the exact session to a file (for debugging)
http.SessionLogFilename := 'c:/someDir/session.txt';
// Perhaps you wish to be seen as a browser on Mac OS X..
http.UserAgent := 'Mozilla/5.0 (Windows NT; Windows NT 6.1; en-GB) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/7.0.500.0 Safari/534.6';

// Note: If the result of authentication is to set Cookies that are used in subsequent requests,
// then make sure Chilkat both saves and sends cookies: 
http.SaveCookies := 1;
http.SendCookies := 1;
http.CookieDir := 'memory';

// Send a GET request to a URL, using Windows Integrated Authentication...
responseStr := http.QuickGetStr('https://somewhere.net/api/user');
if (http.LastMethodSuccess <> 1) then
  begin
    Memo1.Lines.Add(http.LastErrorText);
    Exit;
  end;

Memo1.Lines.Add('response status code = ' + IntToStr(http.LastStatus));
Memo1.Lines.Add('response header:');
Memo1.Lines.Add(http.LastHeader);
Memo1.Lines.Add('----');
Memo1.Lines.Add(responseStr);
end;