[Python-bugs-list] [ python-Bugs-823328 ] urllib2 digest auth is broken

[SourceForge.net]

Bugs item #823328, was opened at 2003-10-14 20:03
Message generated for change (Comment added) made by anthonybaxter
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=823328&group_id=5470

Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Anthony Baxter (anthonybaxter)
>Assigned to: Anthony Baxter (anthonybaxter)
Summary: urllib2 digest auth is broken

Initial Comment:
The urllib2 digest auth support is busted. For
starters, it's looking
for a header 'Authorization' with the auth header in it
- the 
correct header is WWW-Authenticate, according to rfc2617
(and confirmed by the "what does apache do?" test).
Even after 
making this fix, auth is still failing, not sure why yet.

I'm not convinced, looking at the code, that it could
have _ever_ 
worked.



----------------------------------------------------------------------

>Comment By: Anthony Baxter (anthonybaxter)
Date: 2003-10-14 22:16

Message:
Logged In: YES 
user_id=29957

Ok, we're not handling the qop=auth style of Digest, as
specified in the RFC. I'm working on it now.

----------------------------------------------------------------------

Comment By: Anthony Baxter (anthonybaxter)
Date: 2003-10-14 20:12

Message:
Logged In: YES 
user_id=29957

Hm. Looking through comments, it's possible that this used
to work with an older, broken, apache digest mode. It
certainly fails with 2.0.47... :-(


----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=823328&group_id=5470