如何在 401 响应中禁用浏览器的默认登录提示？

Question

使用 XmlHttpRequest 时，是否有任何方法可以在 401 响应中抑制浏览器的登录提示。

 var req = new XMLHttpRequest(); req.open("POST", URL, true); req.setRequestHeader("Accept", "application/json"); req.setRequestHeader("Content-Type", "application/json; charset=utf-8"); req.setRequestHeader("OData-MaxVersion", "4.0"); req.setRequestHeader("OData-Version", "4.0"); req.onreadystatechange = function () { if (this.readyState == 4) { req.onreadystatechange = null; if (this.status == 200) { //alert("Action called successfully"); }else if(this.status == 401) { // } else { var error = JSON.parse(this.response); alert(error.Message); } } };

Answer 1

如果 URL 如下所示：

http://www.example.com

您可以像这样传递登录凭据：

http://username:password@www.example.com/

或者您可以尝试在标题中发送它们：

req.setRequestHeader("Authorization", "Basic " + btoa(username + ":" + password))