samizdatco/ngx-http-auth-digest — Issue #5: Opaque field ignored
Author: samizdatco
Created: 2011-11-04 23:44:51+00:00
State: open

the opaque field is not used when generating challenges, nor is it validated when included in an authentication request. is this a significant omission? the spec makes it seem as though it only exists as a convenience to stash state in, but i could believe some software out there depends upon it...