ruby/lib/webrick/httpauth
normal 32e277acbf webrick/httpauth/digestauth: stream req.body
WARNING! WARNING! WARNING!  LIKELY BROKEN CHANGE

Pass a proc to WEBrick::HTTPRequest#body to avoid reading a
potentially large request body into memory during
authentication.

WARNING! this will break apps completely which want to do
something with the body besides calculating the MD5 digest
of it.

Also, keep in mind that probably nobody uses "auth-int".
Servers such as Apache, lighttpd, nginx don't seem to
support it; nor does curl when using POST/PUT bodies;
and we didn't have tests for it until now...

* lib/webrick/httpauth/digestauth.rb (_authenticate): stream req.body

git-svn-id: svn+ssh://ci.ruby-lang.org/ruby/trunk@62965 b2dd03c8-39d4-4d8f-98ff-823fe69b080e
2018-03-28 08:06:49 +00:00
..
authenticator.rb Add frozen_string_literal: false for all files 2015-12-16 05:07:31 +00:00
basicauth.rb Add frozen_string_literal: false for all files 2015-12-16 05:07:31 +00:00
digestauth.rb webrick/httpauth/digestauth: stream req.body 2018-03-28 08:06:49 +00:00
htdigest.rb webrick: httpauth requires regular files 2017-12-22 01:07:39 +00:00
htgroup.rb webrick: httpauth requires regular files 2017-12-22 01:07:39 +00:00
htpasswd.rb webrick: httpauth requires regular files 2017-12-22 01:07:39 +00:00
userdb.rb Add frozen_string_literal: false for all files 2015-12-16 05:07:31 +00:00