# HTTP Digest Authentication not working

**URL:** <https://www.ruby-forum.com/t/http-digest-authentication-not-working/165124>\
**Category:** Rails\
**Created:** [April 9, 2009, 11:05am UTC](https://www.ruby-forum.com/t/http-digest-authentication-not-working/165124 "2009-04-09T11:05:44Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![javinto](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/j/e79b87/32.png) [@javinto](https://www.ruby-forum.com/u/javinto)\
**Post date:** [April 9, 2009, 11:05am UTC](https://www.ruby-forum.com/t/http-digest-authentication-not-working/165124/1 "2009-04-09T11:05:44Z")

</div>

Hi to all,

I’ve created a new project with Rails 2.3.2 and literally copied the  
HTTP Digest Authententication example from the documentation into a  
SecretsController:

class SecretsController \< ApplicationController

Users = {“dhh” =\> “secret”}  
before\_filter :authenticate

def secret  
render :text =\> “Password Required!”  
end

private  
def authenticate  
realm = “Application”  
authenticate\_or\_request\_with\_http\_digest(realm) do |name|  
Users[name]  
end  
end  
end

Now, I do get the HTTP authentication dialog in my browser(s), but  
entering any name will let me pass!! Only on Escape I get the  
unauthorized page. But wrong names or passwords will let me through!

In my log file I get:

Processing SecretsController#index (for 127.0.0.1 at 2009-04-09  
10:44:32) [GET]  
Filter chain halted as [:authenticate] rendered\_or\_redirected.  
Completed in 16ms (View: 16, DB: 0) | 401 Unauthorized [http://  
localhost/secrets]  
[4;36;1mSQL (0.0ms) [0m [0;1mSET NAMES ‘utf8’ [0m  
[4;35;1mSQL (0.0ms) [0m [0mSET SQL\_AUTO\_IS\_NULL=0 [0m

Processing SecretsController#index (for 127.0.0.1 at 2009-04-09  
10:44:35) [GET]  
Rendering template within layouts/secrets  
Rendering secrets/index  
Completed in 811ms (View: 811, DB: 0) | 200 OK [[http://localhost/](http://localhost/)  
secrets]  
host/secrets]  
[4;36;1mSQL (0.0ms) [0m [0;1mSET NAMES ‘utf8’ [0m  
[4;35;1mSQL (0.0ms) [0m [0mSET SQL\_AUTO\_IS\_NULL=0 [0m

What is missing? Something in my routes?

I’ve tried this with IE/Safari/Firefox on Vista and XP.  
I’m running on localhost with a XAMPP installation. Should I configure  
something?

Thanks

Jan