Add support for proxies that use NTLM/Kerberos authentication

Current behavior:

Users attempting to use a proxy with NTLM authentication required will encounter the following error in Cypress when performing a cy.visit through their proxy:

HTTP/1.1 407 Proxy Authentication Required
Proxy-Authenticate: NEGOTIATE
Proxy-Authenticate: NTLM
Proxy-Authenticate: Basic realm="..."

Desired behavior:

Cypress reads off the required NTLM/Kerberos auth strings on Windows and automatically uses them to connect to the Internet.

Versions

Cypress 3.3.2 Windows (maybe other OSes have token stores too)

Related Issues

• #850 - add in-browser support for NTLM authentication
• #1255 - add in-browser support for Kerberos authentication
• #4646 - allow tests to respond to authentication requests in real-time
• #4669 - add in-browser support for Digest authentication

[bjowes]

Agreed, I also think NTLM support should be native to Cypress - but not only for proxies but also for sites under test. But it is a fair argument to say that NTLM proxies should be supported first, since they apply to many users behind corporate proxies, regardless of what sites they are testing.

When it comes to implementation, I solved it in the plugin by letting user specify the user/pass. But this is a different scenario since I wanted to give the user control of which user should authenticate for the test run. An alternative solution could be to compile a native dll for node (with node-gyp) which can call Win32 API methods. That way it should be possible to let the OS perform the authentication for logged in user, but it would only work on Windows.

[flotwig]

@richardszanyi I am not overly familiar with the differences between NTLM and Kerberos, sorry.

Check out the “Configuration hints” section of the cntlm docs. It does seem like you need to know a few pieces of information about your proxy.

---

If you don’t think cntlm will work, it looks like px does the same thing, and does explicitly support Kerberos auth, and has less to configure as well: https://github.com/genotrance/px Might be a better solution.