Re: [Bug-wget] [PATCH] Change testenv/Test-auth-both.py from XFAIL to a normal test

[Tim Rühsen]

Am Samstag, 22. November 2014, 23:53:58 schrieb Darshit Shah:
> Multiple challenges in a single header are allowed. I had to hack a
> workaround in the Test suite explicitly to support this behaviour.
> 
> I quote RFC 2616, sec. 14.47
> 
> The WWW-Authenticate response-header field MUST be included in 401
> (Unauthorized) response messages. The field value consists of at least one
> challenge that indicates the authentication scheme(s) and parameters
> applicable to the Request-URI.
> 
> WWW-Authenticate = "WWW-Authenticate" ":" 1#challenge

Yes, just in this second I found an example in RFC7235 4.1:

For instance:

     WWW-Authenticate: Newauth realm="apps", type=1,
                       title="Login to \"apps\"", Basic realm="simple"

Tim

signature.asc
Description: This is a digitally signed message part.