Invoke-WebRequest with digest

[damianon]

We have a script that runs just fine on Powershell 5, but when executing on devops agenst running ubuntu and powershell core 7.1 it always fails with a 401 Error.

$Password = ConvertTo-SecureString $MongoAtlasApiKeyPrivate -AsPlainText -Force
$Credentials = New-Object System.Management.Automation.PSCredential ($MongoAtlasApiKeyPublic, $Password)

Invoke-WebRequest -Uri $MongoAtlasApiUrl -Method POST -ContentType "application/json" -Credential $Credentials -Body $json

It's trying to callt he mongo atlas api, which according to mongo's documentation requires digest authentictaion. However I couldn't find anything mentioning digest with Invoke-WebRequest. Onlny Oauth and other auth methods, but nothing about digest. Is it just no possible anymore since PWSH 6/7?

This is the corresponding mongo documentation: https://docs.atlas.mongodb.com/reference/api/whitelist-add-one

[iSazonov]

I believe it is not PowerShell issue but underlying .Net. See dotnet/runtime#42301
You can discuss this there.

As workaround you always add an authentication header manually - you can find examples in Internet.

[damianon]

Thanks for that link.

I can find many examples for basic or bearer authentication, but almost nothing about digest with powershell.

[iSazonov]

@damianon The repo is only for PowerShell developers. You can get help faster on forums and other resources.

[tik9]

I found an example for digest authentication here. It is in german, you see in the .ps1 that the parameter -credential is used with Invoke-RestMethod. I think this is digest, as in the "Wireshark" part of the linked website you see the use of digest: www-authenticate: digest. I think that curl can be used with any method with the parameter --anyauth and has --digest as param as well. Here is more on digest.

[CarloToso]

@iSazonov I think we can close, the issue underlying with dotnet was fixed, It works correctly in PS7.3.2
Test:

$password = ConvertTo-SecureString 'password' -AsPlainText -Force
$credential = New-Object System.Management.Automation.PSCredential ('user', $password)
Invoke-WebRequest "https://httpbin.org/digest-auth/auth/user/password" -Credential $credential

This issue has been marked as external and has not had any activity for 1 day. It has been be closed for housekeeping purposes.