# API Digest Authentication - What is this?

**URL:** <https://forum.bubble.io/t/api-digest-authentication-what-is-this/213042>\
**Category:** APIs\
**Created:** [June 27, 2022, 10:47am UTC](https://forum.bubble.io/t/api-digest-authentication-what-is-this/213042 "2022-06-27T10:47:12Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![benjamin.doerries](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/benjamin.doerries/32/130422_2.png) [@benjamin.doerries](https://forum.bubble.io/u/benjamin.doerries)\
**Post date:** [June 27, 2022, 10:47am UTC](https://forum.bubble.io/t/api-digest-authentication-what-is-this/213042/1 "2022-06-27T10:47:12Z")

</div>

Hi Community,

can bubble set a digest authentication when making a api call?

i try to make a API Call with the bubble connector to the Xentral API .  
The xentral docu: [Xentral-API API documentation](https://update.xentral.biz/apidoc/docs211.html#authorisierung)  
says it must be a digest authentication. I tried every possible authentication method, but nothing worked.

Can someone help ?

---

<div class="post-metadata">

**Author:** ![JohnMark](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/johnmark/32/42431_2.png) [@JohnMark](https://forum.bubble.io/u/JohnMark)\
**Post date:** [June 27, 2022, 12:14pm UTC](https://forum.bubble.io/t/api-digest-authentication-what-is-this/213042/2 "2022-06-27T12:14:55Z")

</div>

Hi @benjamin.doerries

" How does Digest Authentication work?

Digest authentication is another authentication type specified in HTTP 1.1. Unlike basic authentication, digest authentication does not require the password to be transmitted. Rather, **the client takes the username and password and uses the MD5 hashing algorithm to create a hash, which is then sent to the SQL Server**. "

You can use some MD5 plugin converter to create a hash.

More : [Digest definition](https://en.wikipedia.org/wiki/Digest_access_authentication)

Xentral:

 ![image](https://us1.discourse-cdn.com/bubble/original/3X/d/3/d3c3323a2ca31dc28189675cac0fad7b7a979616.png)  
Replace XXXXXXXXX with MD5 hash (including user password).

some Bubble plugins:

 ![image](https://us1.discourse-cdn.com/bubble/original/3X/a/d/adec0d04ec2ae857e17fc88584abb77f204d2d34.png)

example:

 ![image](https://us1.discourse-cdn.com/bubble/original/3X/9/3/93a88cab01980cea8b1047d8d5a50dc2c60e792f.png)

---

<div class="post-metadata">

**Author:** ![benjamin.doerries](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/benjamin.doerries/32/130422_2.png) [@benjamin.doerries](https://forum.bubble.io/u/benjamin.doerries)\
**Post date:** [June 27, 2022, 1:33pm UTC](https://forum.bubble.io/t/api-digest-authentication-what-is-this/213042/3 "2022-06-27T13:33:26Z")

</div>

Hi Mark,

thank you very much for your reply. This is a very good approach to move forward.  
I will try that and give you feedback. 😊

---

<div class="post-metadata">

**Author:** ![benjamin.doerries](https://sea1.discourse-cdn.com/bubble/user_avatar/forum.bubble.io/benjamin.doerries/32/130422_2.png) [@benjamin.doerries](https://forum.bubble.io/u/benjamin.doerries)\
**Post date:** [June 27, 2022, 3:32pm UTC](https://forum.bubble.io/t/api-digest-authentication-what-is-this/213042/4 "2022-06-27T15:32:04Z")

</div>

Hi,

i have now a little better understanding how digest auth works.  
I found a nice tutorial about that here: [https://www.youtube.com/watch?v=eAQC3JfDUl8](https://www.youtube.com/watch?v=eAQC3JfDUl8)  
He explained that the server will repond a error first with the following parameter: the **“realm”, and “nonce”** which i need for further processing. 🥳 🥳 🥳

On postman i tested the following call: [https://6163dc326e249.xentral.biz/api/v1/](https://6163dc326e249.xentral.biz/api/v1/)  
and the server responded exactly how it should, as shown in the pictures:

With the error body:

 ![xentralbubble1](https://us1.discourse-cdn.com/bubble/original/3X/b/4/b4f52d52e6e5e7619606b1f7ac33fd637556fc98.jpeg)

and the Header body with the parameter i need in the next step:

 ![xentralbubbl2](https://us1.discourse-cdn.com/bubble/original/3X/8/2/824f89069198fcb7e1ab6431b4beb63b724e31fa.jpeg)

How can i handle this respond now in bubble?  
I have to store “realm” and “nonce” somehow in the bubble workflows to create the MD5 hash in three workflow steps:

 ![image](https://us1.discourse-cdn.com/bubble/original/3X/9/3/93a88cab01980cea8b1047d8d5a50dc2c60e792f.png)

Thanks you in advance 🙂