Add support for SHA-256 and SHA-512/256 algorithms (RFC 7616)

Open danielmunoz opened this issue 5 years ago • 1 comments

RFC 7616 from September 2015 about HTTP Digest Access Authentication adds support for two new algorithms, SHA2-256 as mandatory and SHA2-512/256 as a backup, and defines the proper algorithm negotiation.

Does this project have support for SHA-256 and SHA-512/256 algorithms?

Does this project implement RFC 7616 or the original RFC 2617 from June 1999?

If not, it is planned to implement RFC 7616? Will be pull requests accepted?

Dec 14 '20 12:12 danielmunoz

Hi,

Sorry I missed your message.

Currently only MD5 is supported. I think so far this project largely only implements the first RFC.

I think we could add the algorithm negotiation and support for SHA algos. Would happily accept a PR so long as there's test coverage and existing example projects are unaffected.

I won't be implementing it myself, but can answer questions.

Dec 30 '20 06:12 flakey-bit