Hi!

I'm currently messing around with digest authentication and found a problem (latest SVN).

Digest authentication works fine iff the URI requested by the client is not escaped (i.e. contains no space or some other 'weird' character). If the request URI is escaped, the check in MHD_digest_auth_check() @ digestauth.c:675 fails:

0 != strncmp (uri, connection->url, strlen (connection->url))

giving me the error message: "Authentication failed, URI does not match".

I've added a log statement to output 'uri' and 'connection->url' right after the check:
printf( "%s: URI( %s ) CNX( %s )\n", __FUNCTION__, uri, connection->url );

The result ist:

MHD_digest_auth_check: URI( /eins%20zwo/test.html ) CNX( /eins zwo/test.html )


Best regards,
Andreas


Reply via email to