是否可以自定义 Windows 身份验证凭据对话框提示的标题？
我正在构建一个中央 Intranet Web 门户，提供对各种其他 Web 应用程序和工具的访问。多个目标 Web 应用程序托管在运行 IIS 且启用了 Windows 身份验证的外部公司的 Web 服务器上。
我遇到的问题是每个外部站点都会提示用户的安全凭据，但没有提供请求凭据的站点的上下文。假设每个站点上的用户凭据都不同，他们可能很难知道在每个目标端点上提供哪个用户名/密码。
是否可以自定义这些Windows身份验证提示对话框的标题？我想显示请求凭据的服务器的域名。或者这会带来安全风险吗？
我可以在每个站点上设置要求来实现此问题的解决方案，或者向它们提供一段可重用的代码。
我找到了适用于 Firefox 的此插件 ，但我真的需要它是跨浏览器的。可以通过客户端或服务器端 JavaScript 来实现吗？
I am building a central intranet web portal that provides access to various other web applications and tools. Several of the target web applications are hosted on external companies' web servers running IIS with Windows Authentication enabled.
The problem I have is each of these external sites prompts for the users' security credentials, but without supplying the context of which site is requesting the credentials. Assuming the users' credentials are different across each of these sites, it can be difficult for them to know which username/password to supply at each of these target endpoints.
Is it possible to customize the title of these Windows Authentication prompt dialogs? I'd like to show the domain name for the server requesting credentials. Or would this present a security risk?
I can set requirements on each of these sites to implement a solution to this problem, or provide a reusable piece of code to them.
I found this plugin for Firefox, but I really need this to be cross-browser. Can it be achieved with client- or server-side JavaScript?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
显然，不可能识别请求凭据的服务器，并且有充分的理由：防止欺骗银行网站以收集帐户等。如果我对此有误，请纠正我。
相反，我将放置一个简单的标签或对话框，以便用户了解请求的来源。
Apparently it's not possible to identify the server requesting credentials, and for good reason: to prevent spoofing a banking site in order to collect accounts, etc. Someone please correct me if I'm wrong about this.
Instead, I'll put up a simple label or dialog box so the user has some cue where the request is coming from.