Skip to main content

TvxAuthType

TvxAuthType = (fatNone, fatBasic, fatBearer, fatMicrosoftOAuth, fatGoogleOAuth, fatNetsuiteOAuth, fatCustomOAuth, fatWindows)

Example

procedure ConfigureBearer(Client: TvxHTTP; const Token: String);
begin
Client.AuthType := fatBearer;
Client.Password := Token;
end;

Usage

TvxAuthType selects no authentication, Basic, bearer, provider OAuth, custom OAuth or Windows SSPI for Velox HTTP and transport clients.

Members

ValueOrdinalMeaning
fatNone0Disable the local authentication callbacks and clear request credentials.
fatBasic1Use HTTP Basic authentication with Username and Password.
fatBearer2Use Velox's bearer handler; current TvxHTTP supplies Password as the bearer token.
fatMicrosoftOAuth3Acquire/use a Microsoft OAuth token through the Velox OAuth authenticator.
fatGoogleOAuth4Acquire/use a Google OAuth token.
fatNetsuiteOAuth5Acquire/use a NetSuite OAuth token, including its provider-specific client-assertion path.
fatCustomOAuth6Use caller-supplied OAuth endpoints and settings.
fatWindows7Use Windows SSPI/NTLM authentication and optional Domain.

Behavior and boundaries

  • fatBasic sends a reversible base64 credential representation and is safe only over authenticated TLS.
  • fatBearer does not obtain a token; the current client passes Password to the bearer authentication object. Protect that property as a secret.
  • Provider/custom OAuth members select bearer authentication but first call TvxOAuth2Authenticator; required Tenant, ClientId, Secret, Scope, endpoints and GrantType vary.
  • fatWindows selects TIdSSPINTLMAuthentication. The Velox legacy fatNTLM is normalized to fatWindows in some product copy paths but is not script-visible.
  • When InProcessAuth is false, Velox pre-creates authentication so credentials can go with the first request; when true, challenge handling controls the exchange.
  • Authentication selection does not configure TLS. Set and verify transport security separately.

Additional Technical Info

TvxAuthType selects the authentication handler used by TvxHTTP and related transports. The meaning of credential properties depends on the selected member.

The product's native enum contains a ninth trailing member, fatNTLM, labelled old. The PascalScript importer deliberately/accidentally stops at fatWindows; scripts cannot name fatNTLM. Shared members keep the same ordinals because the omission is trailing.

Related Code Library entries

External references

Created 2026-07-15