-
Bug
-
Resolution: Done
-
Major
-
None
-
None
-
None
Check Digest authentication mechanism implementation for incompatibilities with the RFC https://datatracker.ietf.org/doc/html/rfc2617#section-1.2.
It is mentioned that authentication scheme should be case insensitive so clients should be able to provide authorization header begginning with "Digest " prefix in a case insensitive manner. In our implementation of Digest authentication mechanism this is not currently the case.
- is related to
-
JBEAP-23123 [GSS](7.4.z) ELY-303 ELY-2298 - The 'Basic' and 'Digest' HTTP Authentication Schemes not compatible with RFC7617 and RFC7616
- Closed