如何在 401 響應中禁用瀏覽器的默認登錄提示？

Question

使用 XmlHttpRequest 時，是否有任何方法可以在 401 響應中抑制瀏覽器的登錄提示。

 var req = new XMLHttpRequest(); req.open("POST", URL, true); req.setRequestHeader("Accept", "application/json"); req.setRequestHeader("Content-Type", "application/json; charset=utf-8"); req.setRequestHeader("OData-MaxVersion", "4.0"); req.setRequestHeader("OData-Version", "4.0"); req.onreadystatechange = function () { if (this.readyState == 4) { req.onreadystatechange = null; if (this.status == 200) { //alert("Action called successfully"); }else if(this.status == 401) { // } else { var error = JSON.parse(this.response); alert(error.Message); } } };

Answer 1

如果 URL 如下所示：

http://www.example.com

您可以像這樣傳遞登錄憑據：

http://username:password@www.example.com/

或者您可以嘗試在標題中發送它們：

req.setRequestHeader("Authorization", "Basic " + btoa(username + ":" + password))