MeshCentral/MeshAgent
1
0
Fork 0
mirror of https://github.com/Ylianst/MeshAgent synced 2025-12-20 10:13:17 +00:00
Code Issues Releases Wiki Activity

Fixed bug that prevented digest/auth-int from correctly inserting entity body hash into the response.

Browse Source
This commit is contained in:
Bryan Roe
2022-07-01 10:45:23 -07:00
parent 963beb2b25
commit 25749eccaa
2 changed files with 2 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
modules/http-digest.js
View File

@@ -81,14 +81,13 @@ function generateAuthHeaders(imsg, options, digest)
{
if (!(auth = digest._auth)) { return; }
}
if (digest._auth.qop == 'auth-int' && options.oneshotEntity == null) { return; } // For auth-int, we need to hash the entity body, so if we don't have it, we must return
var step1 = digest._options.username + ':' + auth.realm + ':' + digest._options.password;
auth.step1 = md5.syncHash(step1).toString('hex').toLowerCase();
var step2 = options.method + ':' + options.path;
if (qop == 'auth-int' && options.oneshotEntity != null) { step2 += (':' + md5.syncHash(options.oneshotEntity).toString('hex').toLowerCase()); }
if (auth.qop == 'auth-int' && options.oneshotEntity != null) { step2 += (':' + md5.syncHash(options.oneshotEntity).toString('hex').toLowerCase()); }
auth.step2 = md5.syncHash(step2).toString('hex').toLowerCase();
if (auth.qop == null)