-
-
Notifications
You must be signed in to change notification settings - Fork 33.7k
[3.8] bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest Auth (GH-18338) #18712
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
[3.8] bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest Auth (GH-18338) #18712
Conversation
…ythonGH-18338) * bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest authentication - The 'qop' value in the 'WWW-Authenticate' header is optional. The presence of 'qop' in the header should be checked before its value is parsed with 'split'. Signed-off-by: Stephen Balousek <stephen@balousek.net> * bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest authentication - Add NEWS item Signed-off-by: Stephen Balousek <stephen@balousek.net> * Update Misc/NEWS.d/next/Library/2020-02-06-05-33-52.bpo-39548.DF4FFe.rst Co-Authored-By: Brandt Bucher <brandtbucher@gmail.com> Co-authored-by: Brandt Bucher <brandtbucher@gmail.com> (cherry picked from commit 5e260e0) Co-authored-by: Stephen Balousek <sbalousek@users.noreply.github.com>
Codecov Report
@@ Coverage Diff @@
## 3.8 #18712 +/- ##
===========================================
+ Coverage 82.08% 83.28% +1.19%
===========================================
Files 1919 1571 -348
Lines 582229 415244 -166985
Branches 43736 44484 +748
===========================================
- Hits 477944 345825 -132119
+ Misses 94716 59768 -34948
- Partials 9569 9651 +82
Continue to review full report at Codecov.
|
|
@sbalousek and @orsenthil: Status check is done, and it's a success ✅ . |
|
@sbalousek and @orsenthil: Status check is done, and it's a success ✅ . |
|
@sbalousek and @orsenthil: Status check is done, and it's a failure ❌ . |
3 similar comments
|
@sbalousek and @orsenthil: Status check is done, and it's a failure ❌ . |
|
@sbalousek and @orsenthil: Status check is done, and it's a failure ❌ . |
|
@sbalousek and @orsenthil: Status check is done, and it's a failure ❌ . |
presence of 'qop' in the header should be checked before its value
is parsed with 'split'.
Signed-off-by: Stephen Balousek stephen@balousek.net
Signed-off-by: Stephen Balousek stephen@balousek.net
Co-Authored-By: Brandt Bucher brandtbucher@gmail.com
Co-authored-by: Brandt Bucher brandtbucher@gmail.com
(cherry picked from commit 5e260e0)
Co-authored-by: Stephen Balousek sbalousek@users.noreply.github.com
https://bugs.python.org/issue39548