Hm, thanks for the answer, but it get's stranger.
I don't have any of the "On*Document" events implemented at all, because all processing happens in my "TLISAAPIRADA.Execute" procedure. I don't serve documents or anything. (I've specified a HttpAppSrv1.DocDir, but that's empty at the moment) The hg401-handling in the examples happens all in the "On*Document" handlers.
Now the funny part is: The first unauthenticated "get" gets a 401 response with
<HTML>
<HEAD>
<TITLE>401 Access Denied</TITLE>
</HEAD>
<BODY>
<H1>401 Access Denied</H1>The requested URL /protocol/6192458077624899 requires authorization.<P>
</BODY>
</HTML>
as a body. (other endpoint, same .Execute - refactoring is pending when Auth works...)
The next "get" gets a "501 Unimplemented". Then the next the 401 again and then the next the 501. And so fort...
Where should I put a check if the client Flags are hg401, I I only use my own TUrlHandler class via "Add*Handler"?
I tried adding
if Flags=hg410 then
exit;
to the top of my ".Execute", but the compiler complains that hg401 is undeclared (E2003), despite "OverbyteIcsHttpSrv" being in my uses clause.
EDIT: My eyes are getting tired, "hg401" is the correct one. I will try it and get back...
EDIT 2: It looks like "flags" is the one belonging to the URL-Handler and not the one for the client. I can't find how to access the client flags. "client.flags" does not work.