[{"data":1,"prerenderedAt":149},["ShallowReactive",2],{"content:\u002Fposts\u002Fbasic-auth-auto-login-bypass":3,"surround:\u002Fposts\u002Fbasic-auth-auto-login-bypass":138},{"id":4,"title":5,"body":6,"categories":113,"date":115,"description":116,"draft":117,"extension":118,"image":119,"meta":120,"navigation":122,"path":123,"permalink":119,"pinned":117,"published":119,"readingTime":124,"recommend":119,"references":119,"seo":129,"sitemap":130,"stem":131,"tags":132,"type":135,"updated":136,"__hash__":137},"content\u002Fposts\u002Fposts\u002Fbasic-auth-auto-login-bypass.md","跳过登录弹框：实现 Basic Auth 自动授权",{"type":7,"value":8,"toc":106},"minimark",[9,19,23,26,33,40,44,47,53,56,59,64,67,70,73,82,85,91,97,103],[10,11,15],"alert",{"type":12,"icon":13,"title":14},"info","tabler:robot","AI 迁移提示",[16,17,18],"p",{},"本文由 AI 协助从旧站迁移，尚未完成逐篇人工审校；内容如有疏漏，将在复核后修订。",[20,21,22],"h2",{"id":22},"前言",[16,24,25],{},"问题原因呢，是我在整理书签和密码填充工具的时候发现的一个问题，对于这样的弹框，因为是直接弹出在浏览器的，密码填充工具无法进行填充账号密码等信息。",[16,27,28,29],{},"下面的鉴权方式就是：",[30,31,32],"code",{"code":32},"Basic Auth",[16,34,35],{},[36,37],"img",{"alt":38,"src":39},"",".\u002Fimages\u002Fbasicauth-nopass-cover.webp",[20,41,43],{"id":42},"什么是basic-auth","什么是Basic Auth？",[16,45,46],{},"Basic Auth，也称为 HTTP 基本认证（HTTP Basic Authentication），是一种用于 HTTP 协议的简单认证机制。在 Basic Auth 中，客户端在发送请求时，将用户名和密码以 Base64 编码的形式包含在请求头的 Authorization 字段中发送给服务器，服务器收到请求后，会解码 Authorization 字段并验证用户名和密码。",[16,48,49],{},[50,51,52],"strong",{},"如何判断你这个web页面是不是Basic Auth？",[16,54,55],{},"先看弹窗样式，弹窗样式紧贴浏览器的搜索栏(上图)",[16,57,58],{},"打开F12 查看请求的接口响应头信息，看到Www-Authenticate的值包含Basic，并且状态码为401",[16,60,61],{},[36,62],{"alt":38,"src":63},".\u002Fimages\u002Fbasicauth-nopass-1.webp",[20,65,66],{"id":66},"解决问题",[16,68,69],{},"那么堡垒机是怎么解决此类问题的？",[16,71,72],{},"selenium操作这里Basic Auth网站的实现方式是：直接把用户名和密码拼接到URL中进行访问。",[74,75,80],"pre",{"className":76,"code":78,"language":79,"meta":38},[77],"language-sql","from selenium import webdriver\ndriver = webdriver.Chrome()\ndriver.get('http:\u002F\u002Fadmin:password@10.1.13.80:9100')\n","sql",[30,81,78],{"__ignoreMap":38},[16,83,84],{},"于是，我就使用他的方式进行拼接了一下，就访问成功了。",[10,86,88],{"type":87},"warning",[16,89,90],{},"URL 中的凭据会出现在浏览器历史记录、服务器日志和 Referer 头中，仅在可信内网环境中使用此方式。",[74,92,95],{"className":93,"code":94,"language":79,"meta":38},[77],"# 格式\nhttp:\u002F\u002F\u003C用户名>:\u003C密码>@\u003Cip地址或域名>:\u003C端口号，如果是80可以不填>\nhttps:\u002F\u002F\u003C用户名>:\u003C密码>@\u003Cip地址或域名>:\u003C端口号，如果是443可以不填>\n\n#例如：\nhttp:\u002F\u002Fadmin:password@10.1.13.80:9100\n",[30,96,94],{"__ignoreMap":38},[16,98,99,100],{},"但是会报一个错误",[30,101,102],{"code":102},"Get server info from frps failed!",[16,104,105],{},"这个错误是正常的用户名密码的参数传递和请求的不符，把url后面的路径删掉在访问就可以了。",{"title":38,"searchDepth":107,"depth":107,"links":108},4,[109,111,112],{"id":22,"depth":110,"text":22},2,{"id":42,"depth":110,"text":43},{"id":66,"depth":110,"text":66},[114],"网络","2026-01-03","详解如何通过 URL 传参、Nginx 反向代理注入 Header 以及浏览器插件等方式，实现对 Basic Auth 认证站点的免密自动登录。",false,"md",null,{"slots":121},{},true,"\u002Fposts\u002Fbasic-auth-auto-login-bypass",{"text":125,"minutes":126,"time":127,"words":128},"3 min read",2.49,149400,498,{"title":5,"description":116},{"loc":123},"posts\u002Fposts\u002Fbasic-auth-auto-login-bypass",[32,133,134],"Nginx","安全","tech","2026-06-27 09:08:39","67vC9c5SIFlaN0Rg36OL9TDIrDlmARFDNVQLkaHgflQ",[139,144],{"title":140,"path":141,"stem":142,"date":143,"type":135,"children":-1},"CentOS 安装 MySQL 5.7 完整指南","\u002Fposts\u002Fcentos-mysql57","posts\u002Fposts\u002Fcentos-mysql57","2026-01-01 13:20:34",{"title":145,"path":146,"stem":147,"date":148,"type":135,"children":-1},"Linux 安装 Maven 并配置私服镜像","\u002Fposts\u002Fmaven-install","posts\u002Fposts\u002Fmaven-install","2026-01-06",1788712225586]