Digest authentication fails to parse authorization correctly when uri has query parameters about http-auth

[gevorg]

Please check the digest_nofile.js example, I tested with the latest version and it works for me.

Digest username="simon", realm="Simon Area.", nonce="57341f022e1d6b3da39cba6dd39996f9", uri="/admin/sync/ris_ratingsbooklist?marketcodes=425", algorithm=MD5, response="9ab4f6320988fe8ce371f3899830ba14", qop=auth, nc=00000003, cnonce="2b692799f9db4793"

[ username: 'simon',
realm: 'Simon Area.',
nonce: '57341f022e1d6b3da39cba6dd39996f9',
uri: '/admin/sync/ris_ratingsbooklist?marketcodes=425',
algorithm: 'MD5',
response: '9ab4f6320988fe8ce371f3899830ba14',
qop: 'auth',
nc: '00000003',
cnonce: '2b692799f9db4793' ]

[gevorg]

Btw new loop looks like this:

  for token in tokens # Looping tokens.   
    # this is for IE, Chrome sends space after ',' while IE don't
    token = token.trim()
    sepIndex = token.indexOf "=" # Separator index.

    name = token.substr 0, sepIndex # First part with name.
    value = token.substr sepIndex + 1 # Second part with value.

    if (value.indexOf "\"") != -1 
      value = value.substr 1, (value.length - 2) # Strip quotes.

    # Add option.
    clientOptions[name] = value; 

[llawrence]

I will try the latest version from github. I was refreshing from npm.
Thank you!

On Wed, Oct 1, 2014 at 9:07 AM, Gevorg Harutyunyan <[email protected]

wrote:

Please check the digest_nofile.js example, I tested with the latest
version and it works for me.

Digest username="simon", realm="Simon Area.",
nonce="57341f022e1d6b3da39cba6dd39996f9",
uri="/admin/sync/ris_ratingsbooklist?marketcodes=425", algorithm=MD5,
response="9ab4f6320988fe8ce371f3899830ba14", qop=auth, nc=00000003,
cnonce="2b692799f9db4793"

[ username: 'simon',
realm: 'Simon Area.',
nonce: '57341f022e1d6b3da39cba6dd39996f9',
uri: '/admin/sync/ris_ratingsbooklist?marketcodes=425',
algorithm: 'MD5',
response: '9ab4f6320988fe8ce371f3899830ba14',
qop: 'auth',
nc: '00000003',
cnonce: '2b692799f9db4793' ]

—
Reply to this email directly or view it on GitHub
https://github.com/gevorg/http-auth/issues/40#issuecomment-57490518.

[gevorg]

yw, just let me know if it will not work for you. Gevorg

[gevorg]

btw, the latest version is published to NPM with 2.2.0 version, so you can use NPM also.