I understand that I can do browser authentication with Javascript, and then grab, say, an XML file with that javascript. My use case is a bit different though: There's a link on a webpage to a PDF on a different server. That server does browser authentication. The username and password are NOT secrets, in fact right now, we publish the link like this:
"Download PDF (use guest/guest as username/password)".
What I need: the user clicks the link, but does NOT have to fill in the username/pass, because we see many users getting confused by this (in usability tests).
We do not have access to the other server where the PDF is hosted.
Any ideas?