httpd
httpd copied to clipboard
apache
Support for User: header in draft-vanrein-http-unauth-user
According to draft-vanrein-httpd-unauth-user Offers HTTP support for https://[email protected] Implemented as equivalent to https://example.com/~john
Wouldn't this need to add a Vary response header?
You are right of course! I actually wrote it in my draft...
HTTP caches [RFC7234] need to distinguish requests with different User header values. The Vary header [Section 7.1.4 of [RFC7231]] MUST be present in the matching response, and the header MUST either be a single "*" star (U+002a) or list the "user" name, for all responses whose processing was influenced by the User header. This requirement does not apply to software and configurations that ignore the User header.
...but overlooked it in the Userdir. Will fix!
This adds a token User to the Vary header, precisely when the User header is used. Thank you for pointing out the oversight; I was thinking of the equivalent /~username form in mod_userdir.c and forgot about it.
That's funny, a check failed on a missing package during apt-get on one platform.
I'll upload documentation next, so that'll trigger another round anyway.
[covener] CGI would already be providing HTTP_USER implicitly. Is there a reason for an addl var? [vanrein] Removing URL-style escapes.
The escapes are used to carry UTF-8 content, which is not possible in plain HTTP header syntax.