]> git.ipfire.org Git - thirdparty/Python/cpython.git/commit
bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest Auth (GH-18338)
authorStephen Balousek <sbalousek@users.noreply.github.com>
Sat, 29 Feb 2020 20:31:58 +0000 (13:31 -0700)
committerGitHub <noreply@github.com>
Sat, 29 Feb 2020 20:31:58 +0000 (12:31 -0800)
commit5e260e0fde211829fcb67060cfd602f4b679f802
treeca97a14821c44b6dcb7691fe7c4e1d6ca2e5f8d5
parenteb47fd58ab6483857661aa0822986538a68aa0e5
bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest Auth (GH-18338)

* bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest authentication

 - The 'qop' value in the 'WWW-Authenticate' header is optional. The
   presence of 'qop' in the header should be checked before its value
   is parsed with 'split'.

Signed-off-by: Stephen Balousek <stephen@balousek.net>
* bpo-39548: Fix handling of 'WWW-Authenticate' header for Digest authentication

 - Add NEWS item

Signed-off-by: Stephen Balousek <stephen@balousek.net>
* Update Misc/NEWS.d/next/Library/2020-02-06-05-33-52.bpo-39548.DF4FFe.rst

Co-Authored-By: Brandt Bucher <brandtbucher@gmail.com>
Co-authored-by: Brandt Bucher <brandtbucher@gmail.com>
Lib/urllib/request.py
Misc/NEWS.d/next/Library/2020-02-06-05-33-52.bpo-39548.DF4FFe.rst [new file with mode: 0644]