Answer a Digest challenge#

Digest auth proves that you know a password, but it does not send the password in the clear. It works in two steps, and the app handles both for you. The server refuses the first request. The second request answers the challenge that the server sent back.

Fill in the username and password#

You supply a Username and a Password. The app masks the password. Both fields accept a {{variable}}, so you can keep them in an environment rather than type them in.

How the two requests work#

When you send, the app makes the first request without credentials. The server replies with a 401 and a challenge that includes a one-time value. The app uses that value with your username and password to compute a response. The app then sends a second request that carries the response. If the response checks out, the server returns the real result.

You see the final result. The app handles the challenge and the retry for you, so a request with Digest auth behaves like any other request from the Auth tab.