Skip to content

Conversation

brycebaril
Copy link

@brycebaril brycebaril commented Sep 18, 2025

  • Added custom digest-auth.js module supporting RFC 7616 and RFC 2069
  • Removed www-authenticate package dependency
  • Updated requester.js to use digest-auth.js
  • Added unit tests that should cover all MarkLogic scenarios

Fixes #961

- Added custom digest-auth.js module supporting RFC 7616 and RFC 2069
- Removed www-authenticate package dependency
- Updated requester.js to use digest-auth.js
- Added unit tests that should cover all MarkLogic scenarios
@Copilot Copilot AI review requested due to automatic review settings September 18, 2025 04:18
Copy link

@Copilot Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull Request Overview

This PR removes the www-authenticate package dependency by implementing a custom RFC 7616/2069 compliant digest authentication module. The change reduces external dependencies while maintaining full compatibility with MarkLogic's digest authentication scenarios.

  • Replaced www-authenticate dependency with custom digest-auth.js implementation
  • Added comprehensive unit tests covering RFC 7616, RFC 2069, and MarkLogic-specific scenarios
  • Updated authentication flow in requester.js to use the new module

Reviewed Changes

Copilot reviewed 4 out of 5 changed files in this pull request and generated 1 comment.

File Description
package.json Removed www-authenticate dependency
lib/digest-auth.js Added custom digest authentication implementation
lib/requester.js Updated to use new digest-auth module
test-basic/digest-auth-unit-test.js Added comprehensive unit tests

Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.

@rjrudin
Copy link
Contributor

rjrudin commented Sep 18, 2025

Thanks @brycebaril ! We've got our hands full with a few things right now but will try to review this soon. Thanks for putting together both the issue and the PR.

@brycebaril
Copy link
Author

Thank you for fixing this via other methods! ❤️

@brycebaril brycebaril closed this Sep 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

The www-authenticate library used for DIGEST authentication causes runtime crash in FIPS mode

2 participants