---
title: "Hidden Basic authentication"
url: "https://sbx.developer-internal.sanofi.com/apis/httpbin-1/versions/da3754ed-f573-4cf9-a100-7688d77483f4/paths/hidden-basic-auth-user---password/get"
---

> Full API specification: https://sbx.developer-internal.sanofi.com/apis/httpbin-1/versions/da3754ed-f573-4cf9-a100-7688d77483f4.md

# Hidden Basic authentication

`GET` `/hidden-basic-auth/{user}/{password}`

Returns 404 Not Found unless the request is authenticated.

## Path parameters

- `user` (string, required) - Username. Use the same username in the path AND for authorization.
- `password` (string, required) - Password. Use the same password in the path AND for authorization.

## Responses

- `200` - OK
- `404` - Unautorized (the username and password used for Basic auth do not match those in the URL path.)

## OpenAPI definition

```yaml
openapi: 3.0.1
info:
  title: httpbin
  version: 1.0-oas3
servers:
  - url: https://httpbin.org
  - url: http://httpbin.apim.eu/
  - url: https://eu.httpbin.org
  - url: http://eu.httpbin.org
  - url: http://localhost:8000/test
paths:
  /hidden-basic-auth/{user}/{password}:
    get:
      summary: Hidden Basic authentication
      tags:
        - auth
      description: Returns 404 Not Found unless the request is authenticated.
      security:
        - basicAuth: []
      parameters:
        - $ref: "#/components/parameters/user"
        - $ref: "#/components/parameters/password"
      responses:
        "200":
          $ref: "#/components/responses/200BasicAuth"
        "404":
          description: Unautorized (the username and password used for Basic auth do not
            match those in the URL path.)
security:
  - basicAuth: []
components:
  parameters:
    user:
      name: user
      in: path
      required: true
      description: Username. Use the same username in the path AND for authorization.
      schema:
        type: string
    password:
      name: password
      in: path
      required: true
      description: Password. Use the same password in the path AND for authorization.
      schema:
        type: string
  responses:
    200BasicAuth:
      description: OK
      content:
        application/json:
          schema:
            type: object
            properties:
              authenticated:
                type: boolean
                example: true
              user:
                type: string
                description: The user name specified in the request.
  securitySchemes:
    basicAuth:
      type: http
      scheme: basic
      description: Use the same username and password as you will provide in path
        parameters.
```