(SQL Server) HTTP Digest-MD5 Authentication Testing with httpbin.org

The URL https://httpbin.org/digest-auth/auth/user/passwd is password protected with user="user" and password="passwd". It requires Digest-MD5 authentication. Chilkat will automatically handle Digest-MD5 authentication as required by the server response. In this case, however, the server will fail the authentication unless a Cookie is included in the request. The cookie can have any name and any value. (Yes, this is ridiculous, and many developers have probably spent countless hours assuming their Digest-MD5 implementations were incorrect.)

Chilkat ActiveX Downloads ActiveX for 32-bit and 64-bit Windows

-- Important: See this note about string length limitations for strings returned by sp_OAMethod calls.
--
CREATE PROCEDURE ChilkatSample
AS
BEGIN
    DECLARE @hr int
    DECLARE @iTmp0 int
    -- Important: Do not use nvarchar(max).  See the warning about using nvarchar(max).
    DECLARE @sTmp0 nvarchar(4000)
    -- This example assumes the Chilkat HTTP API to have been previously unlocked.
    -- See Global Unlock Sample for sample code.

    DECLARE @http int
    -- Use "Chilkat_9_5_0.Http" for versions of Chilkat < 10.0.0
    EXEC @hr = sp_OACreate 'Chilkat.Http', @http OUT
    IF @hr <> 0
    BEGIN
        PRINT 'Failed to create ActiveX component'
        RETURN
    END

    EXEC sp_OASetProperty @http, 'Login', 'user'
    EXEC sp_OASetProperty @http, 'Password', 'passwd'

    -- Add a cookie to satisfy httpbin.org's desire for cookies..
    -- Otherwise, it will fail the perfectly valid Digest-MD5 authentication.
    EXEC sp_OAMethod @http, 'SetRequestHeader', NULL, 'Cookie', 'something="something"'

    DECLARE @strResponse nvarchar(4000)
    EXEC sp_OAMethod @http, 'QuickGetStr', @strResponse OUT, 'https://httpbin.org/digest-auth/auth/user/passwd'
    EXEC sp_OAGetProperty @http, 'LastMethodSuccess', @iTmp0 OUT
    IF @iTmp0 = 0
      BEGIN
        EXEC sp_OAGetProperty @http, 'LastErrorText', @sTmp0 OUT
        PRINT @sTmp0
        EXEC @hr = sp_OADestroy @http
        RETURN
      END


    PRINT @strResponse

    DECLARE @status int
    EXEC sp_OAGetProperty @http, 'LastStatus', @status OUT

    PRINT 'response status code = ' + @status

    -- The output of this program is:
    -- 
    -- 	{ 
    -- 	  "authenticated": true, 
    -- 	  "user": "user"
    -- 	} 
    -- 
    -- 	response status code = 200

    EXEC @hr = sp_OADestroy @http


END
GO