PRACTICE

Digest Authentication

Practice page that simulates HTTP Digest Authentication (demo creds: admin/admin).

Client

Username Password HTTP Method GET POST PUT DELETE Digest URI

Client status: Ready

Flow: Initial request → server sends 401 with WWW-Authenticate: Digest ... → client computes response hash → resends with Authorization: Digest ....

Server (Simulated)

Realm: Protected Area QOP: auth Algorithm: MD5

WWW-Authenticate (Challenge)

(click "Request Protected Resource")

Authorization (Client Response)

(not sent yet)

Server status: Waiting

Protected Content

Not authorized yet.

Event Log

[]