Uploaded image for project: 'Qt'
  1. Qt
  2. QTBUG-98280

QAuthenticator doesn't check if algorithm is supported

    XMLWordPrintable

    Details

    • Platform/s:
      Windows
    • Story Points:
      5
    • Commits:
      a92619d950fdbf803cdc8c8ca8e75c1c82abb23f (qt/qtbase/dev) e0c73e8b6fda60cb539bb8fb7c0ec741f49f4aa7 (qt/tqtc-qtbase/5.15) 012424637ec69c98153bab35f0731d13b00601c6 (qt/qtbase/6.2)
    • Sprint:
      Team 2 Foundation_Sprint 47

      Description

      WEB server supports Digest authentication with SHA-256 and MD5. It's reply contains two www-authenticate (challenges? not sure about terminology):

      www_authenticate: Digest algorithm=SHA-256, realm=...
      www_authenticate: Digest algorithm=MD5, realm=...

      QAuthenticator takes first entry and sends request with
      Digest username=..., algorithm=SHA-256, ...

      Of course, it fails.
      By the way, QNetworkReply argument in authenticationRequired slot contains no headers at all, so I had to capture packets with Wireshark to figure out what's happening.
       

        Attachments

        No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

            Assignee:
            manordheim Mårten Nordheim
            Reporter:
            sergesh Sergei
            PM Owner:
            Vladimir Minenko Vladimir Minenko
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:

                Gerrit Reviews

                There are no open Gerrit changes