Incompatible with authentication on web server about donut

[odzhan]

As it turns out, InternetCrackUrl already supports extracting a username and password in a URL.

This commit should support authentication when the URL contains username and password.

Example: https://username:[email protected]/

If you still have problems with this, feel free to reopen the issue.

[odzhan]

It could be implemented using INTERNET_OPTION_USERNAME and INTERNET_OPTION_PASSWORD flags for the InternetSetOption API. What setup do you have? What server are you using to host the module?

[TheWover]

Will add this for v0.9.3. I can assign this one to myself. I will use this server for testing: https://github.com/http-party/http-server

[TheWover]

Received a request to allow for complete compatibility with WebDav, which can use either HTTP Basic Auth or Digest Auth. It can also be configured to use NTLM/Kerberos authentication. Wininet supports all of the above, I think: https://docs.microsoft.com/en-us/windows/win32/wininet/handling-authentication

To start with, will just add support for Basic Auth. If adding support for the others does not add too much complexity, will add them too.

[odzhan]

The parsing now supports short or long options like -e or --entropy. This will need plenty of testing, but just as an example, there's --user: option that stores string in auth buffer of DONUT_CONFIG...change to whatever you like. --auth maybe? Whatever user provides will still need to be split before passing to InternetSetOption in http_client.c. I'm assuming WinInet handles authentication once it has a username/password set.

[TheWover]

Nice! I added that format to the readme and help message