mirror of https://github.com/python/cpython
Patch #812285: allow multiple auth schemes in AbstractBasicAuthHandler.
This commit is contained in:
parent
cadbbfc85b
commit
172e7257f6
|
@ -767,11 +767,10 @@ class HTTPPasswordMgrWithDefaultRealm(HTTPPasswordMgr):
|
||||||
|
|
||||||
class AbstractBasicAuthHandler:
|
class AbstractBasicAuthHandler:
|
||||||
|
|
||||||
rx = re.compile('[ \t]*([^ \t]+)[ \t]+realm="([^"]*)"', re.I)
|
# XXX this allows for multiple auth-schemes, but will stupidly pick
|
||||||
|
# the last one with a realm specified.
|
||||||
|
|
||||||
# XXX there can actually be multiple auth-schemes in a
|
rx = re.compile('(?:.*,)*[ \t]*([^ \t]+)[ \t]+realm="([^"]*)"', re.I)
|
||||||
# www-authenticate header. should probably be a lot more careful
|
|
||||||
# in parsing them to extract multiple alternatives
|
|
||||||
|
|
||||||
# XXX could pre-emptively send auth info already accepted (RFC 2617,
|
# XXX could pre-emptively send auth info already accepted (RFC 2617,
|
||||||
# end of section 2, and section 1.2 immediately after "credentials"
|
# end of section 2, and section 1.2 immediately after "credentials"
|
||||||
|
|
Loading…
Reference in New Issue