[question] express-ntlm prompting for login with https but not with http

[lakam99]

Hi,

I'm not sure if this is an issue or not so I've marked it as a question. I've created an express API endpoint and use express-ntlm to authenticate internal windows users. When I use express-ntlm with HTTP, there is no prompt for login. However, when I use HTTPS, the windows login prompt appears on my website to authenticate for the endpoint. How can I get the windows authentication prompt to not appear and get the same authentication functionality with HTTPS as HTTP?

Thanks in advance

[einfallstoll]

I never heard about this behavior before. What browser are you using? Can you show a screenshot of the login screen that pops up? Where and how is the TLS layer implemented?

[lakam99]

Hey, thanks for the reply. Here are screenshots of the problem on chrome and edge.
Chrome:

Edge:

Code:

I'll also admit I don't know much about TLS, especially how it's implemented. I hope the screenshot of the express-ntlm and certificate implementation will give you a good enough picture. Let me know if you need additional details.

Many thanks