| <?xml version="1.0" encoding="US-ASCII"?> |
| <testcase> |
| <info> |
| <keywords> |
| HTTP |
| Digest |
| </keywords> |
| </info> |
| |
| <reply> |
| <data crlf="headers" nocheck="yes"> |
| HTTP/1.1 401 Authorization Required |
| Server: Apache/1.3.27 (Darwin) PHP/4.1.2 |
| WWW-Authenticate: Digest realm="my-backyard", nonce="314156295" |
| Content-Length: 26 |
| |
| This is not the real page |
| </data> |
| |
| # This is supposed to be returned when the server gets a |
| # Authorization: Digest line passed-in from the client |
| <data1000 crlf="headers"> |
| HTTP/1.1 200 OK |
| Server: Apache/1.3.27 (Darwin) PHP/4.1.2 |
| Content-Type: text/html; charset=iso-8859-1 |
| Content-Length: 23 |
| |
| This IS the real page! |
| </data1000> |
| |
| </reply> |
| |
| <client> |
| <features> |
| !SSPI |
| crypto |
| digest |
| </features> |
| <server> |
| http |
| </server> |
| <name> |
| HTTP Digest to different origins and switching credentials |
| </name> |
| <tool> |
| lib%TESTNUMBER |
| </tool> |
| <command> |
| %HOSTIP %HTTPPORT |
| </command> |
| </client> |
| |
| <verify> |
| <protocol crlf="headers"> |
| GET /api HTTP/1.1 |
| Host: first.test:%HTTPPORT |
| Accept: */* |
| |
| GET /api HTTP/1.1 |
| Host: first.test:%HTTPPORT |
| Authorization: Digest username="alice", realm="my-backyard", nonce="314156295", uri="/api", response="4ecc00e567c37a9d537727890c2e5b32" |
| Accept: */* |
| |
| GET /hook HTTP/1.1 |
| Host: second.test:%HTTPPORT |
| Accept: */* |
| |
| GET /hook HTTP/1.1 |
| Host: second.test:%HTTPPORT |
| Authorization: Digest username="alice", realm="my-backyard", nonce="314156295", uri="/hook", response="d3a7738fb6a23f5543fb8dacc0f0f253" |
| Accept: */* |
| |
| GET /hook HTTP/1.1 |
| Host: second.test:%HTTPPORT |
| Accept: */* |
| |
| GET /hook HTTP/1.1 |
| Host: second.test:%HTTPPORT |
| Authorization: Digest username="bob", realm="my-backyard", nonce="314156295", uri="/hook", response="777e68eddb77294d9cbd6134973cbbab" |
| Accept: */* |
| |
| </protocol> |
| </verify> |
| </testcase> |