How to set authorization header in HTML form of GET method
P粉617237727
2023-08-31 12:21:27
<p>I want to submit an HTML form to a server that accepts the form data in <code>queryString</code> along with the authorization header. The server then sends back the HTML document after performing some calculations on the data and authorization headers. </p>
<h1>Restrictions</h1>
<ol>
<li>I can't use JavaScript features like AJAX or fetch because the form submission gets an HTML response that needs to be opened on the browser. </li>
<li>For internal reasons, the form also requires the <code>GET</code> method. </li>
</ol>
<h1>Response</h1>
<p>The response received is an HTML document containing JavaScript containing <code>sessionStorage.setItem('data', 'value')</code> which is scoped only to the source. The form exists in the <em>parent.example.com</em> source, and the received HTML document is in the <em>child.example.com</em> source. So we have to go to the <em>child.example.com</em> page like an HTML form redirect. </p>
![[Web front-end] Node.js quick start](https://img.php.cn/upload/course/000/000/067/662b5d34ba7c0227.png)
Client code cannot perform this operation.
The closest way is to have the server respond to the request with a
401 Unauthorizedstatus and aWWW-Authenticate: Basicheader, which causes the browser to prompt the user for input using its native UI Credentials, and after the user enters the credentials, repeat the request using the format for Basic Authentication and addAuthorization.As Phil mentioned in the comments, it sounds like the URL you want to request is indeed not designed for direct browser navigation.
Rather than trying to solve this problem, you may be better off changing the authentication system to something else (such as a cookie set in response to submission of a traditional login form)