mirror of
https://github.com/kennethreitz/httpbin.git
synced 2026-06-05 23:00:18 +00:00
Send/require a cookie header on digest-auth
Also fix an import.
This commit is contained in:
+3
-1
@@ -356,8 +356,10 @@ def digest_auth(qop=None, user='user', passwd='passwd'):
|
||||
auth.set_digest('me@kennethreitz.com', nonce, opaque=opaque,
|
||||
qop=('auth', 'auth-int') if qop is None else (qop, ))
|
||||
response.headers['WWW-Authenticate'] = auth.to_header()
|
||||
response.headers['Set-Cookie'] = 'fake=fake_value'
|
||||
return response
|
||||
elif not check_digest_auth(user, passwd):
|
||||
elif not (check_digest_auth(user, passwd) and
|
||||
request.headers.get('Cookie')):
|
||||
return status_code(401)
|
||||
return jsonify(authenticated=True, user=user)
|
||||
|
||||
|
||||
Reference in New Issue
Block a user