Would it be possible to add HTTP Digest Authentication support, a la LiveJournal friends-only feeds? This would be hugely useful and could have much greater security benefits.

Best, JM

Comments

jitenm’s picture

Sorry if that came off rude, I'm hugely appreciative for all of the marvelous work that has been done on this module!

alex_b’s picture

Hi jitem,

Don't worry, you didn't come off rude.

This is a very good feature request. Unfortunately, we have no plans to implement HTTP digest authentication with leech. Do you have any example code of such an implementation or do you know of another module in Drupal that implements HTTP digest authentication? Collecting some resources around HTTP digest on this thread could be a first step to an actual implementation of it.

jitenm’s picture

Hi alex_b,

Thanks for your reply!

Quick response, Drupal modules that include HTTP digest authentication support are:

Additionally, the HTTP authentication module allows users to log in to Drupal using HTTP basic auth (but not digest).

Additional resources on HTTP digest authentication:

jitenm’s picture

Further, the Mailman module uses the XML-RPC library for its HTTP digest auth implementation.

alex_b’s picture

Thanks for the resources.

Do you think that http digest could be a stand alone module that provides a UI plus an API for other modules like Mailman or leech?

jitenm’s picture

Mailman uses the XML-RPC library for its support. Developing a standalone module could be the correct way to go here, but realistically I think this would be fairly easy to implement into leech, so developing a standalone module might be overkill.