ID:               34401
 User updated by:  lacak at users dot sourceforge dot net
-Summary:          $_SERVER["PHP_AUTH_DIGEST"] not set
 Reported By:      lacak at users dot sourceforge dot net
 Status:           Open
 Bug Type:         Feature/Change Request
 Operating System: Win98
 PHP Version:      5.1.0RC1
 New Comment:

Bug was fixed, but feature request remain ...


Previous Comments:
------------------------------------------------------------------------

[2005-09-07 08:57:09] lacak at users dot sourceforge dot net

Description:
------------
in PHP 5.1 was introduced (in manual) new server variable
$_SERVER["PHP_AUTH_DIGEST"].
But when i try use it, it seems not be initialized or set.

Today PHP_AUTH_DIGEST variable contains authentication string send by
browser. Like this :
'Digest username="pokus", realm="www.realm.sk-0", qop="auth",
algorithm="MD5", ...'

My feature request is change it to associative array :
("explode" string into array like this :)
PHP_AUTH_DIGEST['username']='pokus'
PHP_AUTH_DIGEST['realm']='www.realm.sk-0'
PHP_AUTH_DIGEST['qop']='auth'
...

I think, that it is more user friendly solution.
Thank you very much.


Reproduce code:
---------------
<?php
//phpinfo();
//exit;

 if (isset($_SERVER["AUTH_TYPE"]) || isset($_SERVER["PHP_AUTH_USER"]))
{
  echo "Case 1:<br />";
  echo
$_SERVER["AUTH_TYPE"].":".$_SERVER["PHP_AUTH_USER"].":".$_SERVER["PHP_AUTH_PW"];
  //print_r(apache_request_headers());
  phpinfo();
  exit;
 }

 if (isset($_SERVER["PHP_AUTH_DIGEST"])) {
  echo "Case 2 (PHP_AUTH_DIGEST):<br />";
  echo $_SERVER["AUTH_TYPE"].":".$_SERVER["PHP_AUTH_DIGEST"];
  //print_r(apache_request_headers());
  phpinfo();
  exit;
 }

 if (!empty($_SERVER["REMOTE_IDENT"])) {
  echo "Case 3:<br />";
  echo $_SERVER["REMOTE_IDENT"];
  //print_r(apache_request_headers());
  phpinfo();
  exit;
 }

 if (isset($_SERVER["HTTP_AUTHORIZATION"])) {
  echo "Case 4 (HTTP_AUTHORIZATION):<br />";
  echo "HTTP_AUTHORIZATION: ".$_SERVER["HTTP_AUTHORIZATION"];
  //print_r(apache_request_headers());
  phpinfo();
  exit;
 }

 if (!empty($_SERVER["Authorization"])) {
  echo "Case 5 (Authorization):<br />";
  echo $_SERVER["Authorization"];
  print_r(apache_request_headers());
  phpinfo();
  exit;
 }

 if (function_exists('apache_request_headers')) {
  $headers=apache_request_headers();
  if (isset($headers["Authorization"])) {
   echo "Case 6:<br />";
   echo $headers["Authorization"];
   print_r(apache_request_headers());
   phpinfo();
   exit;
  }
 }

  Header( "HTTP/1.0 401 Unauthorized");
  Header( "WWW-Authenticate: Digest realm=\"www.realm.sk\",
opaque=\"opaque\", nonce=\"nonce\", stale=\"false\", qop=\"auth\"");
  Header( "WWW-Authenticate: Basic realm=\"www.realm.sk\"", false);
  echo "K prístupu je potrebné zada platný login a heslo\n";
  print_r(getallheaders());
  exit;

?>

Expected result:
----------------
Case 2

Actual result:
--------------
Case 6 (if safe_mode=off) else recursive query for user name and
password.


------------------------------------------------------------------------


-- 
Edit this bug report at http://bugs.php.net/?id=34401&edit=1

Reply via email to