[ python-Bugs-979407 ] urllib2 digest auth totally broken

[SourceForge.net]

Bugs item #979407, was opened at 2004-06-25 01:16
Message generated for change (Comment added) made by gbrandl
You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=979407&group_id=5470

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: None
Group: None
Status: Open
Resolution: None
Priority: 5
Submitted By: Aaron Swartz (aaronsw)
Assigned to: Nobody/Anonymous (nobody)
Summary: urllib2 digest auth totally broken

Initial Comment:
The urllib2 digest auth handler is totally broken. 

1. It looks for an "Authorization" header instead of "WWW-
Authenticate" (Authorization is the header you send back).

2.  It  thinks passwords in the URL are port names.

3. Even if you get around all that, it just doesn't work. It seems 
to encrypt the thing wrongly and get itself into an infinite loop 
sending the wrong answer back again and again, being rejected 
each time.

----------------------------------------------------------------------

>Comment By: Georg Brandl (gbrandl)
Date: 2006-02-20 21:00

Message:
Logged In: YES 
user_id=849994

For discussion about number 2 above, see #944396.

----------------------------------------------------------------------

You can respond by visiting: 
https://sourceforge.net/tracker/?func=detail&atid=105470&aid=979407&group_id=5470