HTTP Digest Authentication

jitenm - July 18, 2007 - 05:56
Project:Leech
Version:5.x-1.x-dev
Component:leech
Category:feature request
Priority:normal
Assigned:Unassigned
Status:active
Description

Would it be possible to add HTTP Digest Authentication support, a la LiveJournal friends-only feeds? This would be hugely useful and could have much greater security benefits.

Best, JM

#1

jitenm - July 18, 2007 - 05:58

Sorry if that came off rude, I'm hugely appreciative for all of the marvelous work that has been done on this module!

#2

alex_b - July 18, 2007 - 12:28

Hi jitem,

Don't worry, you didn't come off rude.

This is a very good feature request. Unfortunately, we have no plans to implement HTTP digest authentication with leech. Do you have any example code of such an implementation or do you know of another module in Drupal that implements HTTP digest authentication? Collecting some resources around HTTP digest on this thread could be a first step to an actual implementation of it.

#3

jitenm - July 19, 2007 - 03:16

Hi alex_b,

Thanks for your reply!

Quick response, Drupal modules that include HTTP digest authentication support are:

Additionally, the HTTP authentication module allows users to log in to Drupal using HTTP basic auth (but not digest).

Additional resources on HTTP digest authentication:

#4

jitenm - July 19, 2007 - 03:23

Further, the Mailman module uses the XML-RPC library for its HTTP digest auth implementation.

#5

alex_b - July 19, 2007 - 12:59

Thanks for the resources.

Do you think that http digest could be a stand alone module that provides a UI plus an API for other modules like Mailman or leech?

#6

jitenm - July 23, 2007 - 04:50

Mailman uses the XML-RPC library for its support. Developing a standalone module could be the correct way to go here, but realistically I think this would be fairly easy to implement into leech, so developing a standalone module might be overkill.

 
 

Drupal is a registered trademark of Dries Buytaert.