[New-bugs-announce] [issue38686] WWW-Authenticate qop="auth, auth-int" rejected by urllib

[PypeBros]

New submission from PypeBros <pype_1999.geo at yahoo.com>:

in urllib/request.py, 
   when trying to use HTTP Digest Authentication 
   with a server that replies with `WWW-Authenticate: Digest` 
   where `qop="auth,auth-int"` rather than mere `qop="auth"`

the connection fails to establish with a "qop 'auth,auth-int' is not supported" error message.

`qop="auth,auth-int" should imho be accepted according to the `qop-options` rule in §3.2.1 of https://www.ietf.org/rfc/rfc2617.txt, given that 'auth' is supported by urllib/request.py

----------
messages: 355952
nosy: PypeBros
priority: normal
severity: normal
status: open
title: WWW-Authenticate qop="auth,auth-int" rejected by urllib
versions: Python 2.7, Python 3.6, Python 3.7

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue38686>
_______________________________________