aae235b6ba
digest: compute user:realm:pass digest w/o userhash
...
https://datatracker.ietf.org/doc/html/rfc7616#section-3.4.4
... the client MUST calculate a hash of the username after
any other hash calculation ...
Signed-off-by: Glenn Strauss <gstrauss@gluelogic.com>
Closes #8066
2021-11-30 13:57:46 +01:00
e2b4df7b5e
tests: use %TESTNUMBER instead of fixed number
...
This makes the tests easier to copy and relocate to other test numbers
without having to update content.
Closes #6738
2021-03-19 15:57:21 +01:00
e6b21d422e
runtests: provide curl's version string as %VERSION for tests
...
... so that we can check HTTP requests for User-Agent: curl/%VERSION
Update 600+ test cases accordingly.
Closes #6037
2020-10-02 22:54:23 +02:00
feba3f0549
digest: Do not quote algorithm in HTTP authorisation
...
RFC 7616 section 3.4 (The Authorization Header Field) states that "For
historical reasons, a sender MUST NOT generate the quoted string syntax
for the following parameters: algorithm, qop, and nc". This removes the
quoting for the algorithm parameter.
Reviewed-by: Steve Holme
Closes #4890
2020-02-07 22:46:21 +01:00
f20cbac970
auth: Added test cases for RFC7616
...
Updated docs to include support for RFC7616
Signed-off-by: Florin <petriuc.florin@gmail.com>
Closes #1934
2017-10-28 16:33:09 +02:00
Glenn Strauss
Daniel Stenberg
Pierre-Yves Bigourdan
Florin