What is REALM in URLConnection Function AuthenticationRequested

Hello all.

With the new URLConnection object, the event handler AuthenticationRequested includes an item called ‘realm’. I cannot find in the docs what this is or provides.

Function AuthenticationRequested(realm As String, ByRef name As String, ByRef password As String) Handles AuthenticationRequested as Boolean

Can anyone enlighten me?

Thanks,
Tim

The realm attribute (case-insensitive) is required for all authentication schemes which issue a challenge. The realm value (case-sensitive), in combination with the canonical root URL of the server being accessed, defines the protection space. These realms allow the protected resources on a server to be partitioned into a set of protection spaces, each with its own authentication scheme and/or authorization database. The realm value is a string, generally assigned by the origin server, which may have additional semantics specific to the authentication scheme.

You can have different user/passwords permissions for different parts/services/areas, those “groups” are called realms. If some “part” of a website belongs to the realm “finance”, and another totally different URL also belongs to this realm, and your pair user/pass is allowed on one of those places, it should be allowed on the other too, because that matching pair should be the same for that realm.