innovaphone Apps SDK Developer Forum

Registered 14 years 167 days

Daniel 450 Monday, 6 June 2022, 04:44 PM

http authentication basic/digest

Hello,

is there a possibility, for example the installed myApps Clients to pass through the credentials for a website with http basic or digest authentication?

Because the browsers don´t accept the urls with integrated credentials anymore and with the implementation of CORS it is maybe impossible to get access to a site without to type manually the credentials in the login window.

I hope somebody has an idea.

Moderator

Registered 13 years 45 days

Andreas Fink (innovaphone) Thursday, 7 July 2022, 07:25 PM

Re: http authentication basic/digest

Hello Daniel,

just to make sure I understand you correctly:

you are looking for the possibility to disable the feature of the newer Chrome versions, where credentials in the URLs are blocked?

This would be done for Chrome with the following start parameter:

--disable-blink-features=BlockCredentialedSubresources

This start parameter should be included in the myApps launcher for Windows?

Best Regards

Andreas Fink

Registered 14 years 167 days

Daniel 450 Monday, 25 July 2022, 08:35 AM

Re: http authentication basic/digest

Hello Andreas,

no i tried it again, but it doesn´t work. I got this message in the browser console of the Windows installed myApps Client:

Deprecation] Subresource requests whose URLs contain embedded credentials (e.g. `https://user:pass@host/`) are blocked. See https://www.chromestatus.com/feature/5669008342777856 for more details.

So i think the myApps Windows launcher isn´t installed with your given parameter. Or have i to install the windows launcher with these parameter?

Moderator

Registered 13 years 45 days

Andreas Fink (innovaphone) Thursday, 28 July 2022, 05:48 PM

Re: http authentication basic/digest

Hello Daniel,

I mean for the myApps client this option must be changed internally, in the source code of the Cromium that is used by myApps, you can not change it by yourself.

But before we implement this change, I would like to have a proof of concept from you, if setting the parameter --disable-blink-features=BlockCredentialedSubresources for Chrome helps you to solve your particular problem.

So please, test your application with Chrome started with --disable-blink-features=BlockCredentialedSubresources. If it works, we can consider to implement this switch in the myApps client.

Best Regards

Andreas Fink

You are here