v0.54.1

What's Changed

Bug fixes

• Reject Digest challenges that omit realm or nonce (RFC 7616 §3.3). parse_www_authenticate() accepted any WWW-Authenticate: Digest challenge that carried at least one auth-param, so a response such as Digest qop="auth" was treated as usable. make_digest_authentication_header() then dereferences auth.at("realm") and auth.at("nonce") unconditionally, and the retry path has no try/catch, so the resulting std::out_of_range propagated out and terminated the client process. Both parameters are now required before a Digest challenge is accepted; a challenge missing either is treated the same as no Digest challenge at all.

Full Changelog: v0.54.0...v0.54.1