kotovalexarian-likes-github/httparty
1
0
Fork 0
mirror of https://github.com/jnunemaker/httparty synced 2023-03-27 23:23:07 -04:00
Code Releases Activity

Improved digest MD5-sess test

Browse source
This commit is contained in:
Tony Brown 2015-08-18 14:13:30 +10:00 • committed by Tony Brown
parent 902e4cbfbc
commit c9f868694a
1 changed files with 12 additions and 12 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

24
features/steps/mongrel_helper.rb
View file

@ -89,11 +89,11 @@ module DigestAuthentication
end end
module DigestAuthenticationUsingMD5Sess module DigestAuthenticationUsingMD5Sess
NONCE = 'nonce'
EXPECTED_PASSWORD = 'maninblack' REALM = 'testrealm@host.com'
QOP = 'auth,auth-int'
def self.extended(base) def self.extended(base)
base.custom_headers["WWW-Authenticate"] = 'Digest realm="testrealm@host.com",qop="auth,auth-int",algorithm="MD5-sess",nonce="nonce",opaque="opaque"' base.custom_headers["WWW-Authenticate"] = %(Digest realm="#{REALM}",qop="#{QOP}",algorithm="MD5-sess",nonce="#{NONCE}",opaque="opaque"')
end end
def process(request, response) def process(request, response)
@ -109,14 +109,14 @@ module DigestAuthenticationUsingMD5Sess
end end
def authorized?(request) def authorized?(request)
auth = request.params["HTTP_AUTHORIZATION"] auth = request.params["HTTP_AUTHORIZATION"]
params = {} params = {}
auth.to_s.gsub(/(\w+)="(.*?)"/) { params[$1] = $2 }.gsub(/(\w+)=([^,]*)/) { params[$1] = $2 } auth.to_s.gsub(/(\w+)="(.*?)"/) { params[$1] = $2 }.gsub(/(\w+)=([^,]*)/) { params[$1] = $2 }
a1a = [params['username'],params['realm'],EXPECTED_PASSWORD].join(':') a1a = [@username,REALM,@password].join(':')
a1 = [md5(a1a),params['nonce'],params['cnonce'] ].join(':') a1 = [md5(a1a),NONCE,params['cnonce'] ].join(':')
a2 = "GET:#{params['uri']}" a2 = [ request.params["REQUEST_METHOD"], request.params["REQUEST_URI"] ] .join(':')
expected_response = md5( [md5(a1),params['nonce'], params['nc'], params['cnonce'], params['qop'],md5(a2)].join(':') ) expected_response = md5( [md5(a1), NONCE, params['nc'], params['cnonce'], QOP, md5(a2)].join(':') )
expected_response == params['response'] expected_response == params['response']
end end
end end