Basic
BasicBrowser-native credential dialog. Encodes username:password as base64.
Challenge
Basic realm="demo"
Authentication Demos
Each endpoint issues a real WWW-Authenticate challenge and reflects the parsed request back once authenticated.
Digest
DigestChallenge–response scheme. Never sends the password in clear text.
Challenge
Digest realm="demo", nonce="…", algorithm=MD5, qop="auth"
Digest MD5
DigestDigest auth using the MD5 hashing algorithm explicitly.
Challenge
Digest realm="demo", nonce="…", algorithm=MD5, qop="auth"
Digest SHA-256
DigestDigest auth using the stronger SHA-256 hashing algorithm.
Challenge
Digest realm="demo", nonce="…", algorithm=SHA-256, qop="auth"
Bearer
BearerToken-based auth. Returns JSON with parsed JWT header and payload.
Challenge
Bearer realm="demo", scope="read"
Bearer2 (RFC 9728)
BearerOAuth 2.0 Protected Resource Metadata discovery via WWW-Authenticate.
Challenge
Bearer resource_metadata="…"
NTLM
NTLMThree-message handshake (Negotiate → Challenge → Authenticate) with NTLMv2 hash. Requires the interactive client.
Challenge
NTLM
Kerberos (Negotiate)
NegotiateSPNEGO/Kerberos via the Negotiate scheme. The client wraps a Kerberos AP-REQ in a GSSAPI/SPNEGO token. Requires the interactive client.
Challenge
Negotiate