How to implement username/password auth with express ntlm?

Question

I am trying to implement username and password auth with Express-ntlm.I have added below code as middleware

app.use( ntlm({
domain: '<domainname>',
domaincontroller: '<ldap url>',
}));

I am not providing any user name password in the request and its automatically adding ntlm header in the request with my loggedin user details. I am getting {Authenticated:true} along with my username and system name in request.ntlm. How can I provide different username/password in this and authenticate? Also will this work if I login from linux/mac system?

Are you reaching this endpoint with a browser? Or Postman? – gh0st Mar 01 '19 at 21:02 — gh0st, Mar 01 '19 at 21:02

score 1 · Answer 1 · answered May 26 '19 at 14:10

1

If you use a supported browser (e.g. IE) NTLM will automatically log the user in using the current session in Windows. express-ntlm will just receive this information and exposes it to the application.

If you want to use other credentials you have to log in using a different user in Windows or use a browser that will show you a prompt for username and password if it gets an NTLM challenge. If I remember correctly Chrome will do it like this.

I never tried it using macOS/Linux, but I'm sure most browser will just provide you a username/password prompt.

answered May 26 '19 at 14:10

Fabio Poloni

8,219
5
44
74

I agreed with you answer but that prompt only capture the username but not password. can you please suggest me how to get entered password in backend. – KARTHIKEYAN.A May 10 '22 at 14:08
@KARTHIKEYAN.A That's not how the protocol works. If you need the user's password you need a custom login – Fabio Poloni May 11 '22 at 19:46
okay, thanks, then will write my custom logic. – KARTHIKEYAN.A May 12 '22 at 03:30

How to implement username/password auth with express ntlm?

1 Answers1