mirror of
https://github.com/zotero/zotero.git
synced 2026-10-13 03:58:05 +00:00
The previous approach of capturing and replaying the Authorization header from an initial request worked for Basic auth but broke with Digest auth, where the header includes the HTTP method and URI in the hash. This caused each replayed request to be rejected with a 401, which Firefox wouldn't retry because the request already included Authorization. Instead, split _channelAuthorization into _basicAuthHeader and _digestParams. For Basic auth, the header is still replayed as-is. For Digest, the challenge parameters (realm, nonce, qop, etc.) are cached and a fresh Authorization header is computed per request. _getAuthorizationHeaders() now takes method and URI parameters so it can compute the correct Digest response hash for each request. |
||
|---|---|---|
| .. | ||
| components | ||
| content | ||
| resource | ||
| tests | ||
| chrome.manifest | ||
| runtests.sh | ||