(Delphi DLL) HTTP Digest-MD5 Authentication Testing with httpbin.org

The URL https://httpbin.org/digest-auth/auth/user/passwd is password protected with user="user" and password="passwd". It requires Digest-MD5 authentication. Chilkat will automatically handle Digest-MD5 authentication as required by the server response. In this case, however, the server will fail the authentication unless a Cookie is included in the request. The cookie can have any name and any value. (Yes, this is ridiculous, and many developers have probably spent countless hours assuming their Digest-MD5 implementations were incorrect.)

Chilkat for Delphi Downloads Chilkat non-ActiveX DLL for Delphi Chilkat ActiveX DLL for Delphi * The examples here use the non-ActiveX DLL.

uses
    Winapi.Windows, Winapi.Messages, System.SysUtils, System.Variants, System.Classes, Vcl.Graphics,
    Vcl.Controls, Vcl.Forms, Vcl.Dialogs, Vcl.StdCtrls, Http;

...

procedure TForm1.Button1Click(Sender: TObject);
var
http: HCkHttp;
strResponse: PWideChar;
status: Integer;

begin
// This example assumes the Chilkat HTTP API to have been previously unlocked.
// See Global Unlock Sample for sample code.

http := CkHttp_Create();

CkHttp_putLogin(http,'user');
CkHttp_putPassword(http,'passwd');

// Add a cookie to satisfy httpbin.org's desire for cookies..
// Otherwise, it will fail the perfectly valid Digest-MD5 authentication.
CkHttp_SetRequestHeader(http,'Cookie','something="something"');

strResponse := CkHttp__quickGetStr(http,'https://httpbin.org/digest-auth/auth/user/passwd');
if (CkHttp_getLastMethodSuccess(http) = False) then
  begin
    Memo1.Lines.Add(CkHttp__lastErrorText(http));
    Exit;
  end;

Memo1.Lines.Add(strResponse);

status := CkHttp_getLastStatus(http);
Memo1.Lines.Add('response status code = ' + IntToStr(status));

// The output of this program is:
// 
// 	{ 
// 	  "authenticated": true, 
// 	  "user": "user"
// 	} 
// 
// 	response status code = 200

CkHttp_Dispose(http);

end;