Skip to content

Quote qop values in digest auth.#1766

Merged
kennethreitz merged 3 commits into
psf:masterfrom
Lukasa:qop
Dec 4, 2013
Merged

Quote qop values in digest auth.#1766
kennethreitz merged 3 commits into
psf:masterfrom
Lukasa:qop

Conversation

@Lukasa

@Lukasa Lukasa commented Nov 29, 2013

Copy link
Copy Markdown
Member

Resolves #1765.

bicycle1885 and others added 2 commits November 29, 2013 15:28
Based on RFC2617 (http://tools.ietf.org/html/rfc2617), the value of
'qop-options' directive should be quoted with double quotes:

    qop-options
         This directive is optional, but is made so only for backward
         compatibility with RFC 2069 [6]; it SHOULD be used by all
         implementations compliant with this version of the Digest
         scheme. If present, it is a quoted string of one or more
         tokens indicating the "quality of protection" values supported by
         the server.  The value "auth" indicates authentication; the
         value "auth-int" indicates authentication with
         integrity protection; see the

curl comamnd-line tool also appends these quotes. You can see this
by `curl -v --digest --user user:passwd http://example.com/digest-auth`.
Unfortunately, some minor server-side implementations seem to be sensitive
on this difference.
@sigmavirus24

Copy link
Copy Markdown
Contributor

#1765 was already a PR, why did you open this one? We could have added tests after the fact. Can you rebase this to work off of #1765 so that @bicycle1885 gets some credit?

@Lukasa

Lukasa commented Nov 29, 2013

Copy link
Copy Markdown
Member Author

Uh, yeah, that's because I'm an idiot and didn't spot it. Like a moron.

@sigmavirus24

Copy link
Copy Markdown
Contributor

Uh, yeah, that's because I'm an idiot and didn't spot it. Like a moron.

No need to be so hard on yourself.

@sigmavirus24

Copy link
Copy Markdown
Contributor

Also, 👍 will label with "Minion Seal of Approval"

kennethreitz added a commit that referenced this pull request Dec 4, 2013
Quote qop values in digest auth.
@kennethreitz kennethreitz merged commit a030a58 into psf:master Dec 4, 2013
@github-actions github-actions Bot locked as resolved and limited conversation to collaborators Sep 9, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants