All tests / Access
HTTP authentication
What this tests. Basic auth with a 401 challenge, a bearer token, and a third area that answers 404 until you send credentials it never asks for.
The rule. Three areas, each listing five products. The username is reader and the
password is paper-lantern-7; the bearer token is nw-test-bearer-3f9c2a71d04e. The Basic area answers
401 with a WWW-Authenticate challenge, which most HTTP clients answer for you. The bearer area wants
Authorization: Bearer …. The hidden area takes the same Basic credentials but never asks for them: without them it
says 404, so a client that waits for a challenge never gets in.
- Medium
- HTTP only
- Answer key
/access/http-auth/answers.json
- Basic area (Basic,
401without credentials) - Bearer area (Bearer,
401without credentials) - Hidden area (Basic,
404without credentials)
Data version 1.0.0. Everything here is made up: products, brands, people, towns. tests.json · robots.txt · Source