Windows Authentication: pass username/password in URL

Is it possible to pass both username and password in on the URL therefore bypassing the popup window prompting for both? I'm referring to http protocol and not ftp. Thanks.

Rob

Is that really safe?

Eric

Hello,
I guess you are referring to the Basic Authentication dialog that appears when you access protected resources.
The username/pwd we enter in those are sent to the server in request header using "Authorization" header. I do not think you can pass them in request URL.
If you are planning to request protected resources programmatically then HTTPClient can be used to embed the credentials in the request.
Regds
Amit

Hi Eric,
Normally it wouldn't be. In this case, however, we're dealing with a more controlled area. We aren't calling the page from the browser either but through a different means and it's on a local network, not on the WWW.

Rob

Rob,

In case you do need the Basic Authentication syntax in the url, as Amit said, then it's http(s)://username:password@server/resource.ext

>We aren't calling the page from the browser either but through a different means...
Great, because IE has some restrictions described at The default behavior of Internet Explorer for handling user information in HTTP and in HTTPS URLs

Regards,
Dan
[ October 22, 2007: Message edited by: Dan Drillich ]