Gregg Kellogg

Without a session_id, something else must be used on which to base the creation of the nonce. The OAuth plugin creates a DB table to track nonces, which is too ...

Definitely like the ability to use ha1 for verification vs. a clear-text password. However, I think we need to make a variant of the ha1 method public, so that ...

Yes, this is a vestage from the basic use case. authenticate_or_request_with_http_digest and authenticate_with_http_digest only pass the username parameter. You...

Here’s an updated patch. I ended up making some slight modifications to the digest code. Tests are now pretty much along the lines of Basic authentication.

Fixed bug in http_digest_authentication_response_detail.

This patch refactors HTTP Digest to remove exception usage. It adds http_digest_authentication_response_detail to be able to determine the cause of an authentic...

Exceptions are used within the body of Digest Authentication, and presented to the application level, as the nature of the encoded digest is dense, and it's use...

Here is a new patch that addresses the issues raised:

• Replace controller.send! with controller.send, mirroring the same case in Basic authentication
• Refactor e...

New patch uploaded.

I'll work on an update to the patch now. I have a couple of other fixes I wanted to get in anyway.