(PHP Extension) HTTPS Windows Integrated Authentication

This example pertains to running on the Windows operating system only.

It provides guidance on how to send HTTP requests using the current logged-on Windows user credentials. This is where NTLM/Negotiate authentication is used, but the login/password credentials are not explicitly provided by the application, but are implicitly provided based on the Windows logged-on user (i.e. the Windows account for the running process).

Chilkat PHP Downloads PHP Extension for Windows, Linux, MacOS, Alpine Linux, Solaris

<?php

// The version number (9_5_0) should match version of the Chilkat extension used, omitting the micro-version number.
// For example, if using Chilkat v9.5.0.48, then include as shown here:
include("chilkat_9_5_0.php");

// This example requires the Chilkat API to have been previously unlocked.
// See Global Unlock Sample for sample code.

$http = new CkHttp();

// Chilkat implements the NTLM protocol directly, which is how it can be used on non-Windows systems.
// However, Chilkat can also optionally use Microsoft's SSPI (see https://docs.microsoft.com/en-us/windows/desktop/secauthn/ssp-packages-provided-by-microsoft) 
// to allow for Windows Integrated Authentication.

// Setting the HTTP Login equal to the empty string, and the Password equal to the keyword "default"
// will cause Chilkat to use the Microsoft SSPI w/ integrated authentication.
$http->put_Login('');
$http->put_Password('default');

// We can also explicitly indicate that NTLM or Negotiate authentication is to be used:
$http->put_NegotiateAuth(true);

// Set various properties unrelated to authentication..
// Automatically follow redirects.
$http->put_FollowRedirects(true);
// Give verbose logging in the LastErrorText (in case there are errors)
$http->put_VerboseLogging(true);
// Optionally log the exact session to a file (for debugging)
$http->put_SessionLogFilename('c:/someDir/session.txt');
// Perhaps you wish to be seen as a browser on Mac OS X..
$http->put_UserAgent('Mozilla/5.0 (Windows NT; Windows NT 6.1; en-GB) AppleWebKit/534.6 (KHTML, like Gecko) Chrome/7.0.500.0 Safari/534.6');

// Note: If the result of authentication is to set Cookies that are used in subsequent requests,
// then make sure Chilkat both saves and sends cookies: 
$http->put_SaveCookies(true);
$http->put_SendCookies(true);
$http->put_CookieDir('memory');

// Send a GET request to a URL, using Windows Integrated Authentication...
$responseStr = $http->quickGetStr('https://somewhere.net/api/user');
if ($http->get_LastMethodSuccess() != true) {
    print $http->lastErrorText() . "\n";
    exit;
}

print 'response status code = ' . $http->get_LastStatus() . "\n";
print 'response header:' . "\n";
print $http->lastHeader() . "\n";
print '----' . "\n";
print $responseStr . "\n";

?>