gevorg/http-auth — Issue #11: Support RFC2617 stale
Author: mogsie
Created: 2012-01-28 01:08:27+00:00
State: open

RFC 2617 defines the "stale" server option that indicates to clients that the nonce was stale, and that the client should just re-encrypt the password with the new nonce. This should be done when the nonce was found to be missing, so that a restart doesn't cause all users to be challenged again.