Authentication Test Servers

Question

I'm searching for examples of public HTTPS sites that use one of the following authentication types - these sites will be used as test servers for an application currently under development.

BASIC authentication
DIGEST authentication
NTLM authentication

The test servers need to be using SSL as well as one of the above auth types. Any site suggestions? Preferably the sites should provide free accounts.

Thanks!
Chris

score 85 · Answer 1 · edited Feb 02 '18 at 20:01

85

httpbin.org has public endpoints for HTTP Basic and Digest Authentication (in each example, replace :user and :passwd with the test values you'd like to check against - :qop, too, for Digest):

/basic-auth/:user/:passwd Challenges HTTPBasic Auth.
/hidden-basic-auth/:user/:passwd 404'd BasicAuth.
/digest-auth/:qop/:user/:passwd Challenges HTTP Digest Auth.

Each endpoint is available in both HTTP and HTTPS.

edited Feb 02 '18 at 20:01

Kafoso

504
3
19

answered May 26 '13 at 05:00

John Sheehan

74,152
28
154
191

– lud Nov 19 '13 at 16:00
By today @heaphach comment still applies It'd be useful to be able to test all the HTTP verbs with the different auth options, not just `GET` – Jaime Agudo Apr 30 '15 at 21:16
The httpbin.org "developer's website" ([kennethreitz.org](https://www.kennethreitz.org/)) links to some interesting pictures under the "humans - F" page (NSFW though) – steampowered Jun 08 '19 at 16:53

Ayaz Alifov · Answer 2 · 2020-08-18T15:02:34.547

As an example for testing HTTP authentication:

http://www.httpwatch.com/httpgallery/authentication/authenticatedimage/default.aspx?0.7349707232788205

In order to check a successful authorization you can enter httpwatch as the username. It doesn't matter what you enter for the password field, it just needs to be different every time.

I also put this link if the above one will not work in the future:

http://www.httpwatch.com/httpgallery/authentication/#showExample10

score 3 · Accepted Answer · answered Jun 30 '11 at 11:17

3

To have a reliable test system, you should setup your own Apache web server. It can easily provide SSL encryption and basic/digest auth:

http://httpd.apache.org/docs/2.2/ssl/ssl_faq.html

http://httpd.apache.org/docs/current/howto/auth.html

An NTLM module is available as well:

http://modntlm.sourceforge.net/

http://blog.doylenet.net/?p=6

Otherwise you could run into legal troubles for violating the terms of use for public web sites.

answered Jun 30 '11 at 11:17

Wintermute

1,511
1
12
33

Thanks Wintermute, that's what I went ahead and did. Like you said, it's the most reliable way to go. – Chrisc Jul 01 '11 at 17:02

Authentication Test Servers

3 Answers3

Linked

Related