rayan/bruno
1
0
Fork 0
mirror of https://github.com/usebruno/bruno.git synced 2026-07-07 22:18:33 +00:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #5386 from pkolmann/bugfix-digest-auth

Browse Source 
fix(digest-auth): fix Digest Auth when no QOP is set
This commit is contained in:
Anoop M D
2025-10-07 18:29:11 +05:30
committed by GitHub
parent df4b7c1337 3a04d43ffe
commit 608a9d1954
1 changed files with 12 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
packages/bruno-requests/src/auth/digestauth-helper.js
View File

@@ -99,22 +99,27 @@ export function addDigestInterceptor(axiosInstance, request) {
const method = (originalRequest.method || request.method || 'GET').toUpperCase();
const HA1 = md5(`${username}:${authDetails.realm}:${password}`);
const HA2 = md5(`${method}:${uri}`);
const response = md5(
`${HA1}:${authDetails.nonce}:${nonceCount}:${cnonce}:auth:${HA2}`
);
let response;
if (authDetails.qop && authDetails.qop.split(',').map((q) => q.trim().toLowerCase()).includes('auth')) {
console.debug('Using QOP \'auth\' for Digest Authentication');
response = md5(`${HA1}:${authDetails.nonce}:${nonceCount}:${cnonce}:auth:${HA2}`);
} else {
console.debug('No QOP specified, using simple digest');
response = md5(`${HA1}:${authDetails.nonce}:${HA2}`);
}
const headerFields = [
`username="${username}"`,
`realm="${authDetails.realm}"`,
`nonce="${authDetails.nonce}"`,
`uri="${uri}"`,
`qop="auth"`,
`algorithm="${authDetails.algorithm}"`,
`response="${response}"`,
`nc="${nonceCount}"`,
`cnonce="${cnonce}"`,
];
if (authDetails.qop && authDetails.qop.split(',').map((q) => q.trim().toLowerCase()).includes('auth')) {
headerFields.push(`qop="auth"`, `algorithm="${authDetails.algorithm}"`, `nc="${nonceCount}"`, `cnonce="${cnonce}"`);
}
if (authDetails.opaque) {
headerFields.push(`opaque="${authDetails.opaque}"`);
}