Posted by Dan Trainor on 08/30/05 01:24

Hello once more, all -

I was wondering if it's at all possible to redirect a user to a remote
site, while passing HTTP AUTH credentials somehow.

I've been tinkering around with making a secure login gateway, and the
first server that they log in to would negotiate the login sequence, but
the system would have to preserve HTTP USER and HTTP PASSWD to be passed
to the remote site, as to be backwards compatible with existing HTTP
AUTH-based systems.

I'd rather not use http://user:pass@site.com, however. There's got to
be a different way. I understand that the user's browser is the actual
element in which the username and password are stored for HTTP auth. Is
there a way to "inject" or "update" this information without any
interaction from the visitor him/herself?

Thanks again!
-dant

[Back to original message]