# HTTP Digest Authentication

**URL:** <https://www.ruby-forum.com/t/http-digest-authentication/126147>\
**Category:** Rails\
**Created:** [January 15, 2008, 8:34pm UTC](https://www.ruby-forum.com/t/http-digest-authentication/126147 "2008-01-15T20:34:44Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![brian.oneill](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/da6949/32.png) [@brian.oneill](https://www.ruby-forum.com/u/brian.oneill)\
**Post date:** [January 15, 2008, 8:34pm UTC](https://www.ruby-forum.com/t/http-digest-authentication/126147/1 "2008-01-15T20:34:44Z")

</div>

I just started using authenticate\_or\_request\_with\_http\_basic.  
Is anyone working on the digest version of that?  
(I realize it may get a little complicated with the handshaking)

If not, I wouldn’t mind contributing it. (I’ve implemented it in the  
past for other servers)

-brian

---

<div class="post-metadata">

**Author:** ![brian.oneill](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/da6949/32.png) [@brian.oneill](https://www.ruby-forum.com/u/brian.oneill)\
**Post date:** [October 16, 2008, 5:38am UTC](https://www.ruby-forum.com/t/http-digest-authentication/126147/2 "2008-10-16T05:38:13Z")

</div>

On 15 Oct 2008, at 02:11, Gregg wrote:

> I’ve updated Ticket #7291 “implement http digest authentication” with  
> fixes for generating a stateless nonce. I’m looking for some help to  
> get this committed.
> 
> The nonce is based on time-stamp H(time-stamp “:” session.session\_id).  
> An associated nonce\_valid? method verifies that the timestamp is  
> recent.

You should probably move that over to lighthouse.

Fred

---

<div class="post-metadata">

**Author:** ![brian.oneill](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/da6949/32.png) [@brian.oneill](https://www.ruby-forum.com/u/brian.oneill)\
**Post date:** [September 8, 2010, 8:57pm UTC](https://www.ruby-forum.com/t/http-digest-authentication/126147/3 "2010-09-08T20:57:22Z")

</div>

Gregg Kellogg wrote:

> Created ticket #1230 on Lighthouse.

I am facing exactly the same problem. Any update?

---

<div class="post-metadata">

**Author:** ![brian.oneill](https://www.ruby-forum.com/letter_avatar_proxy/v4/letter/b/da6949/32.png) [@brian.oneill](https://www.ruby-forum.com/u/brian.oneill)\
**Post date:** [October 17, 2008, 5:15am UTC](https://www.ruby-forum.com/t/http-digest-authentication/126147/4 "2008-10-17T05:15:31Z")

</div>

Created ticket #1230 on Lighthouse.