use the proxy's url if available

[thedumbterminal]

When a PSGI app is used behind a reverse proxy the the URL that the client uses can be different from the app's URL, which will normally break digest auth.

Here's a small fix that solves my setup, maybe this fix could be made more generic?

[miyagawa]

Yeah it is terrible if you need to do this in every piece of middleware. You have to handle this at the outer level using something like ReverseProxy middleware.

[thedumbterminal]

I'm already using Plack::Middleware::ReverseProxy and Plack::Middleware::ReverseProxyPath for updating the other headers/environment in my app. Unfortunately if you alter the URI path in the AUTHORIZATION header then authentication will never succeed as the generated digest on the server will not match the one created by the client.

I wonder if creating a new module (Plack::Middleware::Auth::Digest::Reverse etc.) that will include this patch would be a better option as this is kind of an edge case situation.