Skip Menu |

This queue is for tickets about the Catalyst-Authentication-Credential-HTTP CPAN distribution.

Report information
The Basics
Id: 60691
Status: rejected
Priority: 0/
Queue: Catalyst-Authentication-Credential-HTTP

People
Owner: Nobody in particular
Requestors: CYCLES [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: (no value)
Fixed in: (no value)



Subject: Digest response violates RFC 2717
Apparently it returns both auth and auth-init, but it should only return one. http://gist.github.com/547607
On Tue Aug 24 10:11:23 2010, CYCLES wrote: Show quoted text
> Apparently it returns both auth and auth-init, but it should only return > one. > > http://gist.github.com/547607
Hello, I'm warp (quoted in the gist above). I took a closer look at the RFC, and it looks like I was wrong. Section 3.5 of the RFC even contains an example with qop="auth,auth-int". So the problem seems to be in python's urllib2 (which expects either auth or auth-int, not both).
On Mon Aug 30 07:20:03 2010, http://id.frob.nl/ wrote: Show quoted text
> On Tue Aug 24 10:11:23 2010, CYCLES wrote:
> > Apparently it returns both auth and auth-init, but it should only return > > one. > > > > http://gist.github.com/547607
> > Hello, I'm warp (quoted in the gist above). I took a closer look at the > RFC, and it looks like I was wrong. Section 3.5 of the RFC even > contains an example with qop="auth,auth-int". So the problem seems to > be in python's urllib2 (which expects either auth or auth-int, not both).
as the last person said, this is not a real bug.