Upstream proxy and authentication

1 Answer 870 Views
Fiddler Classic
malwareinfosec
Top achievements
Rank 2
Iron
malwareinfosec asked on 21 Aug 2023, 08:14 PM

Hello,

I have set up an upstream proxy that requires authentication. I'm using the Fiddler preference fiddler.defaultproxy to enter the IP address and port number.

Because this proxy requires authentication I'm also using fiddler.proxy.creds to store the user name and password in Base64 format as explained here: https://jegansblog.wordpress.com/2015/05/07/setup-fiddler-as-proxy-server-with-basic-authentication/

However, when I open a new browser window, I'm am getting the authentication prompt again:

Why is it not using the credentials stored in the fiddler.proxy.creds field? 

1 Answer, 1 is accepted

Sort by
0
Nick Iliev
Telerik team
answered on 22 Aug 2023, 10:47 AM

Hey,

 

It is normal for the feature to operate in this manner since its purpose is to imitate proxy authentication. Once activated, it will trigger a prompt in all clients that are using Fiddler to proxy a request. In the background, you will observe that your requests are producing a 407 error and including an authorization header. For further information, please refer to the following link: https://groups.google.com/g/httpfiddler/c/pErxaOtMlyc.

 

Regards,
Nick Iliev
Progress Telerik

Love the Telerik and Kendo UI products and believe more people should try them? Invite a fellow developer to become a Progress customer and each of you can get a $50 Amazon gift voucher.

malwareinfosec
Top achievements
Rank 2
Iron
commented on 22 Aug 2023, 04:53 PM

Thanks Nick for the reference link.

What I don't understand is: why I am still getting prompted to enter authentication in the client? The authentication (username and password) has already been set in Fiddler's fiddler.proxy.creds. I should not have to enter this information again?

malwareinfosec
Top achievements
Rank 2
Iron
commented on 22 Aug 2023, 05:02 PM

I think I see the issue. This is to set up your own authentication to Fiddler from external clients.

My use case was different: I need to authenticate to an upstream proxy and I thought I could store the credentials in Fiddler.

malwareinfosec
Top achievements
Rank 2
Iron
commented on 22 Aug 2023, 05:15 PM

Is there a way to automatically authenticate to an upstream proxy by storing the credentials in Fiddler's preferences?
Nick Iliev
Telerik team
commented on 23 Aug 2023, 07:39 AM

You should be able to check the Automatically Authenticate option. The proxy will require your Windows account credentials that are locally stored on your machine. You can add custom credentials to the OS credentials manager (which in terms should be used by Fiddler through the automatic authenticate option).

 

malwareinfosec
Top achievements
Rank 2
Iron
commented on 23 Aug 2023, 03:46 PM

Thanks Nick!
Tags
Fiddler Classic
Asked by
malwareinfosec
Top achievements
Rank 2
Iron
Answers by
Nick Iliev
Telerik team
Share this question
or