nginx-http-auth-digest icon indicating copy to clipboard operation
nginx-http-auth-digest copied to clipboard

Published 20 hours ago • verified publisher icon samizdatco

Opaque field ignored

Open samizdatco opened this issue 13 years ago • 1 comments

the opaque field is not used when generating challenges, nor is it validated when included in an authentication request. is this a significant omission? the spec makes it seem as though it only exists as a convenience to stash state in, but i could believe some software out there depends upon it...

samizdatco avatar Nov 04 '11 23:11 samizdatco

See https://github.com/samizdatco/nginx-http-auth-digest/blob/bd1c86a8c838bfd63de67c896e2e36ae1070cdb3/bugs.txt#L22-L25

erikdubbelboer avatar Apr 08 '17 03:04 erikdubbelboer