HTTP Authentication Challenge Workbench

How to use HTTP Authentication Challenge Workbench

Separate authentication challenges from their comma-separated parameters and produce a normalized field value. Inspect multiple WWW-Authenticate or Proxy-Authenticate schemes, preserve quoted commas, distinguish token68 payloads from named parameters, and refuse duplicate parameter names within one challenge.

1. Provide www-authenticate or proxy-authenticate field value.
2. Choose the supported mode and run the tool. Review its assumptions and any reported errors.
3. Copy the result or download a separate output; reset to clear the current form.

Good to know

• 20 KB of printable ASCII text, 100 comma members, 100 challenges and 100 parameters per challenge. Supply field values rather than complete header lines.
• This is the generic RFC 9110 challenge envelope. It does not validate Digest calculations, Basic charset rules, Bearer claims or scheme-specific mandatory parameters. Token68 is preserved without assuming its encoding.
• Normalized named values use quoted strings. Obsolete line folding and non-ASCII quoted text are outside this profile. No credentials are requested, generated, sent or stored.
• Inputs are processed on this device and are not automatically saved or uploaded.