Hi Surjendu,
I did a quick test with HTTP Basic authentication using the tutorial example and the "secret" property is correctly decoded.
Which authentication scheme are you using? Best regards, Jerome Surjendu wrote :
If I dochar[] secret = request.getChallengeResponse().getSecret(); I get an encoded value. What do I have to do to get the real password?