Don Parish

Cleaned up git commits so changes easier to follow. Patch has 3 commits: fix for earlier commit, support for using digested password, and support for session-le...

I've replaced with patch with #2209. It incorporates the fixes mentioned here. I believe the current implementation will not work in a controller action that do...

This patches supersedes #2000. The current HTTP Digest authentication seems to be broken in Rails 2.3.1 in my tests in the browser and curl. The tests pass, but...

As long as the session secret is available in the session_store.rb initializer, it is available as:

ActionController::Base.session_options[:secret]

even if t...

Gregg,

Attached is a diff that can implement Digest auth without sessions having to be turned on. I've tested it with curl on Win32. It used the session secret ...

Updated patch from February 18th, 2009 @ 12:56 PM with minor correction to documentation to require 'md5'.

Here is code and gist for last comment:

http://gist.github.com/67053

  ADMIN_REALM = "Admin Realm"
  USERS_REALM = "Users Realm"

  REALM_USERS = {
    ADMIN_R...

Gregg, not sure if it is necessary to make ha1 method public as the code is just a one-liner. I added it just to make my line of code shorter and easier to foll...

Pratik, Added ticket with inital patch. Later attached an updated patch to support use of storing a hash of user credentials instead of a plain text password, l...

Attached patch includes changes from patch above (http_digest_authentication_fix_uri.diff) and adds support for using a hashed digest of the credentials instead...