Hi,
I think I've found a problem with xxx_auth, but it seems so obvious I
thought I would ask before raising a ticket in case I have missed
something.
Problem is that the digest_auth tool does not check that the realm in
the request headers corresponds with the realm in config. It ought to
be possible to have a different protection space for every resource,
but unless the realm is checked this is not possible.
Seems to me there should be a line in auth.check_auth to do this, also
passing realm to this function of course.
