9
votes

I have the following endpoint: http://millennium.iwise.com.br:6017/api/millenium_eco/Tabelas_preco.lista

If I try to open via browser, it asks me credentials and then works fine - as seen on image below.

user: OData

password: 0d@t@123

enter image description here

If I send the same GET request using POSTMAN or SOAPUI I get 401 Unauthorized.

enter image description here

What I am missing here? Thank you in advance.

UPDATE:

I took the browser's header request and used the same in POSTMAN and I'm still receiving 401 Unauthorized. Is there a possibility of the endpoint's server is configured to reject all but browser's request?

enter image description here enter image description here

9
I can see an NTLM Authorization header in your browser request. How do you configure your authorization in POSTMAN or SOAPUI? I see in POSTMAN you send Basic authentications. - k.liakos
@k.liakos Yes, you are right. I found someone with similar issue. Thank you for the tip. I will try to find a solution to do this authtentication in postman/soapui. If you have an idea, please share. - Victor Viola
I found this soapui.org/oauth2/reference/ntlm.html for SOAP UI, but it requires an extra domain to use for NTLM challenges, which you have not provided. Are you aware of something like this? - k.liakos
I am not aware about it but I appreaciate your help. I will try to find a way. Thank you! - Victor Viola
@k.liakos I'm trying to understand how the browser do this authentication. I do not send any domain information and the browser is able to handle the request properly. Do you have any idea? Perhaps something like "default domain"? - Victor Viola

9 Answers

8
votes

I got the exact same issue, requests working from the browser but not using postman.

Since postman syncs across devices, it maintains lot of cache info I believe. I clicked on my profile in the app and signed out from all the devices. I then started the app, did not sign in , I clicked on the "continue without signing in option" which is a link close to the bottom on the sign in page. Then I was able to run the requests via postman.

I then signed in and things were fine via postman.

Note: I always had the SSL certificate verification Off in setting for the request.

4
votes

I have also faced the same issue. It is working from my browser exactly when I provide the user name and password in the prompt window.

I resolved it by using the 'authorization' tab and select authentication type 'Basic Authentication' in the postman.

Postman Screenshot

2
votes

Sign out your current account and make sure checking Clear local data and re-login.

1
votes

Try to go Postman Settings > And turn SSL verification Off

It will allow you to send/ receive request/ response from unsafe URLs

PostmanSettings

1
votes

I faced the same issue, solved it by using NTLM Authentication in postman. You can find it in Authorization tab in postman

https://i.stack.imgur.com/eRMAT.jpg

1
votes

In my case it was due to I have a white space at the end of the url (invisible for me, copy and paste from the browser and may inadvertently added a white space there). Took me a while to find out. It seems like a small bug on Postman side.

0
votes

I was having the same issue and didn't find any solution but it worked once I signed in from another postman account by deleting all the local data of postman. I do not have any idea about why that happened but it looks like it was some kind of setting that I had that caused this issue. I would recommend deleting local data and reset the postman setting if you are a beginner like me and have no idea what's going on.

0
votes

Without even signing in i got the same error. I deleted all the history of postman and ran it again , it serves the purpose.

0
votes

Click on this link

Go to settings->turn off ssl certificate