This doesn't seem to follow the protocol for http digest or am I missing something?

[thenetimp]

Why is there a signin/signout URL? HttpDigest requires that the auth details be sent with every request to the server in the protected area. My REST API expects this to pass the credentials with every request for data and to evaluate it's authenticity with every request as the HttpDigest protocol. Is there a way to use this with a proper HttpDigest setup?

[tafax]

Hi,
the library creates a custom interceptor to send out the Authorization header each time you perform a request after login. Make sure the problem isn't in your server code. Please, check the wiki page about Digest Access Authentication to figure out the complete workflow.
Anyway, if you still have problems, paste your HTTP requests/responses here. I'll look into them.