Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

http: do not require a user name when using CURLAUTH_NEGOTIATE #9047

Closed

Commits on Jun 25, 2022

  1. http: do not require a user name when using CURLAUTH_NEGOTIATE

    In order to get Negotiate (SPNEGO) authentication to work in HTTP you
    used to be required to provide a (fake) user name (this concerned both
    curl and the lib) because the code wrongly only considered
    authentication if there was a user name provided, as in:
    
      curl -u : --negotiate https://example.com/
    
    This commit leverages the `struct auth` want member to figure out if the
    user enabled CURLAUTH_NEGOTIATE, effectively removing the requirement of
    setting a user name both in curl and the lib.
    
    Signed-off-by: Marin Hannache <git@mareo.fr>
    Reported-by: Enrico Scholz
    Fixes https://sourceforge.net/p/curl/bugs/440/
    Fixes curl#1161
    Mareo committed Jun 25, 2022
    Configuration menu
    Copy the full SHA
    6215d38 View commit details
    Browse the repository at this point in the history