search

einfallstoll / express-ntlm

An express middleware to have basic NTLM-authentication in node.js.
BSD 2-Clause "Simplified" License
89 stars 26 forks source link

[question] express-ntlm prompting for login with https but not with http #87

Open lakam99 opened 2 years ago

lakam99 commented 2 years ago

Hi,

I'm not sure if this is an issue or not so I've marked it as a question. I've created an express API endpoint and use express-ntlm to authenticate internal windows users. When I use express-ntlm with HTTP, there is no prompt for login. However, when I use HTTPS, the windows login prompt appears on my website to authenticate for the endpoint. How can I get the windows authentication prompt to not appear and get the same authentication functionality with HTTPS as HTTP?

Thanks in advance

einfallstoll commented 2 years ago

I never heard about this behavior before. What browser are you using? Can you show a screenshot of the login screen that pops up? Where and how is the TLS layer implemented?

lakam99 commented 2 years ago

Hey, thanks for the reply. Here are screenshots of the problem on chrome and edge. Chrome: chrome Edge: edge-1 Code: code

I'll also admit I don't know much about TLS, especially how it's implemented. I hope the screenshot of the express-ntlm and certificate implementation will give you a good enough picture. Let me know if you need additional details.

Many thanks