Problem with basic_auth and digest_auth

[Pete H]

Hi,

I think I've found a problem with xxx_auth, but it seems so obvious I
thought I would ask before raising a ticket in case I have missed
something.

Problem is that the digest_auth tool does not check that the realm in
the request headers corresponds with the realm in config. It ought to
be possible to have a different protection space for every resource,
but unless the realm is checked this is not possible.

Seems to me there should be a line in auth.check_auth to do this, also
passing realm to this function of course.

[Sylvain Hellegouarch]

Hi Peter,

Would you mind opening a ticket since this is a bug.

Thanks,
- Sylvain

Pete H a écrit :