Link to home
Start Free TrialLog in
Avatar of sai7843
sai7843

asked on

Http Web Requests

My application needs to retrieve market data, using HTTP protocol, from a vendor, as a batch process.  I am planning to build an application using httpRequest httpResponse classes.  I have a problem when I post data to the vendors URL, the first request is challenged by "Enter Network Password" dialog box.  I have used Proxy object to supply network credentials, but that was for letting my request go out to the internet.  In my case the remote host is challenging me.  How can I supply these credentials to the remote proxy server in a non-interactive mode.  I have contemplated getting a window handle of the dialog box and manipulating it, but I am not comforatble with that approach.
Avatar of tomasX2
tomasX2

Something like this...

      System.Net.HttpWebRequest request = new System.Net.HttpWebRequest();
      System.Net.CredentialCache cache = new System.Net.CredentialCache();
      cache.Add(new Uri(proxy.Url), "Negotiate", new System.Net.NetworkCredential("username","password","domainname") );
      request.Credentials = cache;
Avatar of sai7843

ASKER

Hi TomasX2,
                   I am already using this to provide credentials for my request to go out to internet thru proxy servers on my end of net work.  But the "Enter NetWok Password" box is appearing when my request reaches the remote host i.e., the remote host is trying to authenticate me with a dialog box.  This is the problem, I am facing.  To see it, please navigate to http://desktop.interactivedata.com/cgi/id-menus.cgi?ref=DM.
Thanks
Sai7843
Are you setting the credentials for both the request object and the request´s proxy object.

        System.Net.HttpWebRequest request;
        request.Credentials = System.Net.CredentialCache.DefaultCredentials;
        request.Proxy.Credentials = System.Net.CredentialCache.DefaultCredentials;              
Avatar of sai7843

ASKER

Hi TomaX2
                     The following is a snapshot of my code.  
                   
                      I am getting 401 return code from remote host

username="abcdefg";    /// These two are required by the remote host
password="xyxyxyx";  ////

// Instantiate the custom Basic authentication module.
CustomBasic customBasicModule = new CustomBasic();
           
// Unregister the standard Basic authentication module.
AuthenticationManager.Unregister("Basic");

// Register the custom Basic authentication module.
AuthenticationManager.Register(customBasicModule);
 
                  
// Create the Web request object.
HttpWebRequest req = (HttpWebRequest) WebRequest.Create(url);

///The following is required so that my request could get on to the internet,
//because the corporate firewall does not allow traffic to get out without proper
//credentials
WebProxy objProxy;
NetworkCredential objCredentials;
objProxy = new WebProxy("ourproxy.mycompany.com", 8080);
objCredentials = new NetworkCredential("user1", "welcome", "companyDomain");
objProxy.Credentials = objCredentials;
req.Proxy = objProxy;
       
// Define the request access method.
req.Method = "POST";
req.Credentials = new NetworkCredential(username, password);   //Required by remotehost            
StreamWriter objStream = new StreamWriter(req.GetRequestStream(), Encoding.ASCII);
objStream.Write("GET,IBM,PRC,20040505");
objStream.Close();

// Issue the request.
HttpWebResponse result = (HttpWebResponse) req.GetResponse();

//Console.WriteLine("\nAuthentication Succeeded:");

// Store the response.
Stream sData = result.GetResponseStream();

////++++++++++++++++++++++++++++Helper class+++++++++++++++++++++++

public class CustomBasic : IAuthenticationModule
{

      private string m_authenticationType ;
      private bool m_canPreAuthenticate ;

      // The CustomBasic constructor initializes the properties of the customized
      // authentication.
      public CustomBasic()
      {
              m_authenticationType = "Basic";
              m_canPreAuthenticate = false;
      }

      // Define the authentication type. This type is then used to identify this
      // custom authentication module. The default is set to Basic.
      public string AuthenticationType
      {
             get
             {
            return m_authenticationType;
             }
      }

      // Define the pre-authentication capabilities for the module. The default is set
      // to false.
      public bool CanPreAuthenticate
      {
            get
            {
                 return m_canPreAuthenticate;
            }
      }

// The checkChallenge method checks whether the challenge sent by the HttpWebRequest
// contains the correct type (Basic) and the correct domain name.
// Note: The challenge is in the form BASIC REALM="DOMAINNAME";
// the Internet Web site must reside on a server whose
// domain name is equal to DOMAINNAME.
      public bool checkChallenge(string Challenge, string domain)
      {
            bool challengePasses = false;

            String tempChallenge = Challenge.ToUpper();

                // Verify that this is a Basic authorization request and that the requested                   // domain is correct.
                // Note: When the domain is an empty string, the following code only
                         // checkswhether the authorization type is Basic.

               if (tempChallenge.IndexOf("BASIC") != -1)
            if (domain != String.Empty)
                  if (tempChallenge.IndexOf(domain.ToUpper()) != -1)
                        challengePasses = true;
                  else
                        // The domain is not allowed and the  
                                                                //authorization type is Basic.
                        challengePasses = false;
            else
                  // The domain is a blank string and the authorization type  
                                                //is Basic.
                  challengePasses = true;

                  return challengePasses;
      }

// The PreAuthenticate method specifies whether the authentication implemented
// by this class allows pre-authentication.
// Even if you do not use it, this method must be implemented to obey to the rules
// of interface implementation.
// In this case it always returns false.
      public Authorization PreAuthenticate(WebRequest request, ICredentials  
                                                                                                                credentials)
      {                
            return null;
      }

// Authenticate is the core method for this custom authentication.
// When an Internet resource requests authentication, the WebRequest.GetResponse
// method calls the AuthenticationManager.Authenticate method. This method, in
// turn, calls the Authenticate method on each of the registered authentication
// modules, in the order in which they were registered. When the authentication is
// complete an Authorization object is returned to the WebRequest.
      public Authorization Authenticate(String challenge, WebRequest request, ICredentials credentials)
      {
            Encoding ASCII = Encoding.ASCII;        

            // Get the username and password from the credentials
            NetworkCredential MyCreds = credentials.GetCredential(request.RequestUri, "Basic");        

            // Verify that the challenge satisfies the authorization requirements.
            bool challengeOk = checkChallenge(challenge, MyCreds.Domain);

            if (!challengeOk)
                  return null;

            // Create the encrypted string according to the Basic authentication
                                // format as follows:
      // a)Concatenate the username and password separated by colon;
      // b)Apply ASCII encoding to obtain a stream of bytes;
      // c)Apply Base64 encoding to this array of bytes to obtain the encoded
            // authorization.
      string BasicEncrypt = MyCreds.UserName + ":" + MyCreds.Password;

      string BasicToken = "Basic " + Convert.ToBase64String(ASCII.GetBytes(BasicEncrypt));

      // Create an Authorization object using the encoded authorization above.
      Authorization resourceAuthorization = new Authorization(BasicToken);


      return resourceAuthorization;
      }
}
Try WebClient as follows

string uriString = "The URL";
string input = "data";
WebClient appClient = new WebClient();
string userId = ConfigurationSettings.AppSettings["webShareUserId"];
string password = ConfigurationSettings.AppSettings["webSharePassword"];
string domain = ConfigurationSettings.AppSettings["webShareDomain"];
appClient.Credentials = (ICredentials)new System.Net.NetworkCredential(userId,password,domain);
appClient.UploadData(uriString,"POST",input);
Avatar of sai7843

ASKER

I have opened a ticket with Microsoft regarding this issue.  It turns out that I was having problems because the remote server was not formatting its headers according to the RFC specifications.  IE itself tolerates this, but HttpWebRequest classes could not cope with this.  Microsoft has recommended using .NET framwork 1.1 and using configuration setting to allow unsafeHeaderParsing, which solved the problem.
ASKER CERTIFIED SOLUTION
Avatar of modulo
modulo

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial