As a part of the Android project I just started, I need to access a service secured by NTLM. On Windows Mobile this is handled automatically by WebClient. For iPhone I had to make the move from the more modern and high level UrlConnection / UrlRequest API to the old school non object oriented C style CFNetwork API. Android turns out to be a bit of the same story as with the iPhone. I started out with HttpURLConnection, only to disappointed again and redirected to the Apache HttpClient. But unlike CFNetwork on iPhone, HttpClient actually does not support NTLM “out of the box”…
Posts Tagged ‘Authentication’
A project I am currently working on involves a REST service and a Silverlight client. The service needs to support user authentication and must work in a cross domain environment. HTTP headers are not allowed when making cross domain request from Silverlight. Unfortunately this means using Basic Authentication is not an option.
The immediate suggestion was to employ a token system where a client would be presented with a GUID in return for a valid username and password. It would then be up to the client to append this token to every subsequent request as part of the querystring. A client implementation would look something like this: