Basic authentication in Postman - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Basic Authentication in API testing?

Basic Authentication is a simple method where the client sends a username and password encoded in Base64 in the HTTP header to verify identity.

beginner

How do you set Basic Authentication in Postman?

In Postman, go to the Authorization tab, select 'Basic Auth' type, then enter your username and password. Postman automatically encodes and adds the Authorization header.

intermediate

Why is Base64 encoding not secure for passwords?

Base64 encoding only changes the format of the password; it does not encrypt it. Anyone intercepting the request can decode it easily, so it should be used with HTTPS.

beginner

What HTTP header is used for Basic Authentication?

The 'Authorization' header is used with the value 'Basic ' followed by the Base64 encoded username and password.

beginner

What is a common real-life analogy for Basic Authentication?

It's like showing your ID card at a door guard. You provide your username and password (ID), and the guard checks if you are allowed in.

In Postman, which tab do you use to set Basic Authentication?

A Headers

B Authorization

C Body

D Params

Basic Authentication credentials are set in the Authorization tab in Postman.

What does Basic Authentication send in the HTTP header?

A OAuth token

B Username and password in plain text

C Encrypted token

D Username and password encoded in Base64

Basic Authentication sends username and password encoded in Base64 in the Authorization header.

Why should Basic Authentication be used with HTTPS?

A To encrypt the credentials during transmission

B Because Base64 encoding is secure

C To speed up the request

D To avoid using passwords

Basic Authentication credentials are only Base64 encoded, not encrypted, so HTTPS is needed to protect them during transmission.

Which HTTP header contains the Basic Authentication credentials?

A Content-Type

B User-Agent

C Authorization

D Accept

The Authorization header carries the Basic Authentication credentials.

What is the format of the Authorization header for Basic Authentication?

A Basic <Base64 encoded username:password>

B Digest <hash>

C Bearer <token>

D Token <API key>

Basic Authentication uses 'Basic' followed by the Base64 encoded username and password.

Explain how Basic Authentication works in API testing using Postman.

Think about how credentials are sent and where you enter them in Postman.

Why is it important to use HTTPS when using Basic Authentication?

Consider the security risks of sending encoded but not encrypted data.