How to Create Load Tests for URLs that use HTTP Basic Authentication (Basic Auth)

Key takeaways

• Basic Auth sends base64-encoded credentials in a header, so the load test just needs that header set.
• Use test credentials, never production ones, since headers end up in logs and reports.
• Confirm the endpoint returns 200 rather than 401 before starting the real run.

In order to create load tests for URLs that use HTTP Basic Authentication to give access to resources, we present below the steps needed for creating a simple load test using Basic Auth:

1. Create a new load test in the Load Focus platform
2. For creating a Basic Auth test click on the Basic Authentication
3. Enter Username and Password
4. Once this is done we are ready to run the test by clicking Execute Test

The results for the load test can be analysed in the test result page

LoadFocus is an easy to use cloud testing platform for load testing, API monitoring, website speed testing.

Frequently Asked Questions

How does Basic Auth work in a load test?

The credentials are base64 encoded and sent in an Authorization header, so the test only needs that header set on the requests that require it.

Can I use real credentials?

Use test accounts. Headers end up in logs, exports and shared reports, and base64 is encoding rather than encryption, so anyone with the report has the password.

What should I check before the full run?

That the endpoint returns 200 rather than 401. A misconfigured header produces a fast, clean-looking test that measured nothing but rejections.

Related reading

• How To Use Apache JMeter To Load Test a Web Server
• Data-Driven Load Testing for Complex User Journeys
• Introduction to Apache JMeter Performance Testing

http basic auth load test