Authenticator response code 400

Question

I tried hitting my server using HttpsURLConnection, got response code 401 - need to authenticate. Tried the following:

            Authenticator.setDefault (new Authenticator() {
                protected PasswordAuthentication getPasswordAuthentication() {
                    return new PasswordAuthentication ("myuser", "!mypassword".toCharArray());
                }
            });

Got response code 400 - bad request.

Based on some stackoverflow research I also tried using:

        String authorizationString = "Basic " + Base64.encodeToString(("username" + ":" + "password").getBytes(), Base64.DEFAULT);
        conn.setRequestProperty("Authorization", authorizationString);

Same problem, code 400. I'm also trusting all hosts using the @Chrispix method in this post: Trust Anchor not found for Android SSL Connection not sure if that is interfering somehow, but this is for a prototype and the site certificate isn't valid, so I needed to bypass the check.

The connection is set up with these properties, not sure if there is anything wrong or missing:

        HttpsURLConnection conn = (HttpsURLConnection) url.openConnection();
        conn.setReadTimeout(10000 /* milliseconds */);
        conn.setConnectTimeout(15000 /* milliseconds */);
        conn.addRequestProperty("Content-Type", "application/json");
        conn.setRequestMethod("POST");
        conn.setDoInput(true);

Thanks!

can you change from Base64.DEFAULT to Base64.NO_WRAP ? You also need `setRequestProperty("Authorization", "Basic " + encoding);` — Blackbelt, Jul 03 '14 at 11:03
try to use postman client where u can check above url with property defined above like content tye or request type(get/post) — KOTIOS, Jul 09 '14 at 10:04

score 1 · Answer 1 · edited May 23 '17 at 12:20

1

How about using HttpClient ?

HttpClient httpClient= new DefaultHttpClient();
HttpGet httpGet= new HttpGet(yourUrl);
String authString = (yourUserName+":"+yourPassword);
httpGet.addHeader("Authorization", "Basic " + 
    Base64.encodeToString(authString.getBytes(),Base64.DEFAULT));
HttpResponse response = httpClient.execute(httpGet);

Seems you wanna by-pass the cert checking currently, this related link may help you

Trusting all certificates using HttpClient over HTTPS

edited May 23 '17 at 12:20

Community

1
1

answered Jul 09 '14 at 09:09

hungr

2,086
1
20
33

why on earth would you send authentication details over http? – humblerookie Jul 09 '14 at 17:35

score 0 · Answer 2 · answered Jul 09 '14 at 20:43

Try this way

public String sendHttpRequest(String params)
{       
    URL url;
    String result = new String();
    try 
    {
        url = new URL(AUTHENTICATION_SERVER_ADDRESS);
        HttpURLConnection connection;
        connection = (HttpURLConnection) url.openConnection();
        connection.setDoOutput(true);
        connection.setRequestMethod("POST");
        connection.setRequestProperty("Content-Type",
                "application/x-www-form-urlencoded;charset=UTF-8");
        PrintWriter out = new PrintWriter(connection.getOutputStream());

        out.println(params);
        out.close();

        BufferedReader in = new BufferedReader(
                new InputStreamReader(
                        connection.getInputStream()));
        String inputLine;

        while ((inputLine = in.readLine()) != null) {
            result = result.concat(inputLine);  

        }
        in.close();         
    } 
    catch (MalformedURLException e) {
        e.printStackTrace();
    } 
    catch (IOException e) {
        e.printStackTrace();
    }           

    if (result.length() == 0) {
        result = HTTP_REQUEST_FAILED;
    }

    return result;


}

params argument should be in this format

      public String authenticateUser(String username, String password) 
      {
           String params = "username="+ URLEncoder.encode(username,"UTF-8") +
                           "&password="+ URLEncoder.encode(password,"UTF-8") +
                    "&";

          String result = socketOperator.sendHttpRequest(params);       

          return result;
       }

Call this function to authentication...

score 0 · Accepted Answer · answered Jul 11 '14 at 23:13

0

It seems that I was getting the proper response- I thought 400 meant a badly formatted request, but checking the error stream I found the request was fine, but the parameters were wrong. Rookie mistake!

answered Jul 11 '14 at 23:13

Adam

1,486
3
20
35

Authenticator response code 400

3 Answers3