HTTP Digest Authentication

Rails
1

I just started using authenticate_or_request_with_http_basic.
Is anyone working on the digest version of that?
(I realize it may get a little complicated with the handshaking)

If not, I wouldn’t mind contributing it. (I’ve implemented it in the
past for other servers)

-brian

2

On 15 Oct 2008, at 02:11, Gregg wrote:

I’ve updated Ticket #7291 “implement http digest authentication” with
fixes for generating a stateless nonce. I’m looking for some help to
get this committed.

The nonce is based on time-stamp H(time-stamp “:” session.session_id).
An associated nonce_valid? method verifies that the timestamp is
recent.

You should probably move that over to lighthouse.

Fred

3

Gregg Kellogg wrote:

Created ticket #1230 on Lighthouse.

I am facing exactly the same problem. Any update?

4

Created ticket #1230 on Lighthouse.