postmanlabs / postman-app-support

Postman is an API platform for building and using APIs. Postman simplifies each step of the API lifecycle and streamlines collaboration so you can create better APIs—faster.
https://www.postman.com
5.85k stars 841 forks source link

NTLM Authentication mostly fails in form-data requests with files #13257

Open tommy2d opened 1 week ago

tommy2d commented 1 week ago

Is there an existing issue for this?

Describe the Issue

When using Postman's built-in support for NTLM authentication in conjunction with multipart file upload requests, it throws 401's when talking to my up-to-date Windows Server 2022 IIS server. Executing the same request with curl works flawlessly.

Steps To Reproduce

  1. Create an IIS 'application' on my Windows 2022 server. Disable anonymous authentication and enable authentication using 'Windows Authentication'. Select NTLM als the sole Authentication provider.
  2. Create a Postman POST request that posts a form that contains at least 1 file upload.
  3. Hit the send error and be presented with an IIS 401 authentication error.

Screenshots or Videos

Form Post request without file succeeds towards my actual application code, working fine on the IIS level:

Scherm­afbeelding 2024-11-13 om 13 47 46

After including a file to upload, IIS declines the authentication.

Scherm­afbeelding 2024-11-13 om 13 47 31

Operating System

macOS

Postman Version

11.19.0

Postman Platform

Postman App

User Account Type

Signed In User

Additional Context?

No response