IIS应用程序池应用程序要求输入密码（基本身份验证），但邮递员或失眠者均无法响应 [英] IIS app pool application asks for password (basic auth) but neither postman or insomnia can respond

问题描述

我们有一台运行EPICOR ERP系统的IIS服务器。 ERP系统安装IIS应用程序池，其中某些URL被重新映射以由应用程序池处理。

We have an IIS server running a EPICOR ERP system. The ERP system installs IIS application pool, which certain urls are remapped to be handled by the app pool.

这里是关于验证的内容：

Here is what it says about the verification:

出于安全原因，应始终将https与REST API一起使用

For security reasons you should always use https with REST API

REST API支持2种身份验证方法基本身份验证
用户名和密码组合成一个字符串，由冒号
分隔并使用Base64进行编码。结果放置在Authorization
标头中：授权：基本{encoded string}令牌认证可以从令牌服务中为用户获得
承载令牌。请参阅
https：//epicorapp2/ERP10.1Test/TokenResource.svc/help （应启用令牌
身份验证）。然后，应以以下形式在
的Authorization标头中发送访问令牌：授权：Bearer
{token string}

REST API supports 2 authentication methods Basic authentication The username and password are combined into a string separated by a colon and encoded using Base64. The result is placed into Authorization header: Authorization: Basic {encoded string} Token authentication The bearer token can be obtained for the user from token service. See https://epicorapp2/ERP10.1Test/TokenResource.svc/help (Token authentication should be enabled). Then access token should be send in the Authorization header in the following form: Authorization: Bearer {token string}

IIS服务器本身具有对顶级URL的匿名身份验证（并且所有其他URL均已关闭）。

The IIS server itself has anonymous authentication for the top level url (and all others are turned off).

当我转到所需的URL时，我在Chrome中的使用经验：

My experience in Chrome when I go to the desired URL:

https：// epicorapp2 / ERP10 .1Test / api / help /

是一个弹出窗口，要求输入用户名/密码（其中用户/密码用于ERP系统，而不是用于主机IIS系统。）

is that one gets a pop-up asking for username/password (where the user/passord is for the ERP system, not for the host IIS system).

但是我无法通过Postman或Insomnia
来复制这种体验（我尝试输入用户名/邮递员和失眠者的授权选项中输入密码。我收到401授权错误。

But I am unable to duplicate this experience either with Postman or Insomnia (I have tried putting in the username/password in the authorization options for both Postman and Insomnia. I get a 401 authorization error.

有任何想法吗？

推荐答案

从来没有邮递员上班，但失眠症却使一旦我能够将自签名证书更新到DigiCert。

Never got postman to work. But Insomnia works fine as soon as I was able to update the self-sign certificate to DigiCert.

这篇关于IIS应用程序池应用程序要求输入密码（基本身份验证），但邮递员或失眠者均无法响应的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！