WARNING: This page is archived and not updated. Please bear in mind any information may be incorrect and any code may not work. Use at your own risk.
James Gardner: Home > Blog > 2007 > IE7 produces different HTTP Digest...

IE7 produces different HTTP Digest headers

Posted:2007-09-22 19:33
Tags:AuthKit

Rohan Barnett has been pointing out a bug in AuthKit he has experienced for quite a while. For some reason AuthKit's digest implementation worked in every browser apart from IE7. All that happens is that IE keeps showing you the pop to enter your username and password.

Today I finally tracked down the problem. IE7's headers look like this:

Digest username="asd",realm="Test Realm",nonce="b99bd0d4c8c5f9d0448910ea6ab5be28",uri="/private",cnonce="9e1a7dc289b9ce26090ae88cb5433cff",nc=00000005,response="1709e5d0616f43a63c3c77b0866ef3d3",qop="auth",opaque="b41c8bf75355adb523d1b05f8f2707d8"

Every other browser's look like something like this with spaces after the commas:

Digest username="asd", realm="Test Realm",
nonce="7f05810618404280262353bb51bd998c", uri="/private",
response="e8e97e5d335af696ab3dd169da02b7b8",
opaque="d0837206408ac92195012fb0ce233e91", qop=auth, nc=00000002,
cnonce="9d6a68265679ac27"

The AuthKit code was splitting on ", " not on ",". I've corrected this, fixing ticket #31 and it now works but I thought I'd blog about it here in case anyone else experiences the same issue.

(view source)

James Gardner: Home > Blog > 2007 > IE7 produces different HTTP Digest...