Skip to content

Add realm to Proxy-Authenticate header#53

Merged
sergeyfrolov merged 2 commits intomasterfrom
realm
Feb 4, 2019
Merged

Add realm to Proxy-Authenticate header#53
sergeyfrolov merged 2 commits intomasterfrom
realm

Conversation

@sergeyfrolov
Copy link
Copy Markdown
Member

@sergeyfrolov sergeyfrolov commented Nov 27, 2018

1. What does this change do, exactly?

Even though realm was not required in older standards, newer https://tools.ietf.org/html/rfc7617 says

The authentication parameter 'realm' is REQUIRED ([RFC7235], Section 2.2).

I can't seem to find any functional meaning behind realms in this context. Squid's default realm is "Squid proxy-caching web server", so I gave descriptive realm to Caddy as well: "Caddy Secure Web Proxy".

Proxy-Authenticate: Basic -> Proxy-Authenticate: Basic realm="Caddy Secure Web Proxy"

2. Please link to the relevant issues.

Resolves #52

3. Which documentation changes (if any) need to be made because of this PR?

None

4. Checklist

  • I have written tests and verified that they fail without my change
  • I made pull request as minimal and simple as possible. If change is not small or additional dependencies are required, I opened an issue to propose and discuss the design first
  • I have squashed any insignificant commits
  • This change has comments for package types, values, functions, and non-obvious lines of code

Resolves #52

Squid's default realm is "Squid proxy-caching web server",
so I decided to give descriptive realm to Caddy as well.
@sergeyfrolov sergeyfrolov merged commit 77cd5d8 into master Feb 4, 2019
@sergeyfrolov sergeyfrolov deleted the realm branch February 4, 2019 00:23
sergeyfrolov added a commit that referenced this pull request May 29, 2019
In #53 we added a realm to the Proxy-Authenticate header, but the realm
only is added, when `probe_resistance` is off.
Proxy-Authenticate header should have a realm when `probe_resistance` is
on as well.
sergeyfrolov added a commit that referenced this pull request May 29, 2019
In #53 we added a realm to the Proxy-Authenticate header, but the realm
only is added, when `probe_resistance` is off.
With this change, Proxy-Authenticate header will have a realm
when `probe_resistance` is on as well.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant