Advanced API Security: OAuth 2.0 and Beyond

© Prabath Siriwardena 2020

P. SiriwardenaAdvanced API Securityhttps://doi.org/10.1007/978-1-4842-2050-4_21

Basic/Digest Authentication

Prabath Siriwardena¹ 

(1)

San Jose, CA, USA

 

HTTP Basic authentication and Digest authentication are two authentication schemes, used for protecting resources on the Web. Both are based on username- and password-based credentials. When trying to log in to a web site, if the browser presents you a dialog box asking your username and password, then most probably this web site is protected with HTTP Basic or Digest authentication. Asking the browser to challenge the user to authenticate is one of the quick and dirty ways of protecting a web site. None or at least very few web sites on the Internet today use HTTP Basic ...