Welcome! Log In Create A New Profile

Advanced

Re: Issue with HttpAuthDigestModule

Francis Daly
March 09, 2013 01:00PM
On Fri, Mar 08, 2013 at 06:41:46PM -0500, redleaderuk wrote:

Hi there,

> I think I've found the actual problem: having a querystring at the end of
> the URL stops the HttpAuthDigiestModule from working correctly.

> Can anyone shed any light on this please? I hope it's something I can fix
> via the config file but perhaps it's simply a limitation with the module
> itself?

It looks to me like a problem with this third-party module.

It calculates a hash over r->uri, and compares it with the hash that the
browser calculated over its idea of the request. If you replace r->uri
with r->unparsed_uri and recompile, it will work for more requests.

The "right" fix is probably to use fields->uri instead, and then also
make sure that fields->uri and r->unparsed_uri correspond to the same
thing. That (in theory) should work for all requests, but would also
take longer to do right.

f
--
Francis Daly francis@daoine.org

_______________________________________________
nginx mailing list
nginx@nginx.org
http://mailman.nginx.org/mailman/listinfo/nginx
Subject Author Posted

Issue with HttpAuthDigestModule

redleaderuk March 07, 2013 11:19PM

Re: Issue with HttpAuthDigestModule

redleaderuk March 08, 2013 06:41PM

Re: Issue with HttpAuthDigestModule

Francis Daly March 09, 2013 01:00PM



Sorry, only registered users may post in this forum.

Click here to login

Online Users

Guests: 205
Record Number of Users: 8 on April 13, 2023
Record Number of Guests: 421 on December 02, 2018
Powered by nginx      Powered by FreeBSD      PHP Powered      Powered by MariaDB      ipv6 ready