[CXF-6748] the qop,nc,algorithm parameter in http auth header must not be enclosed between doble quotation

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.1.5, 3.0.8, 3.2.0
• Estimated Complexity: Unknown
• Assignee: Freeman Fang
• Reporter: Freeman Fang
• Created: 14/Jan/16 09:23
• Updated: 14/Oct/16 14:15
• Resolved: 15/Jan/16 03:38

Description

Per RFC 2617[1], the Authorization Request Header should be

credentials      = "Digest" digest-response
   digest-response  = 1#( username | realm | nonce | digest-uri
                   | response | [ algorithm ] | [cnonce] |
                   [opaque] | [message-qop] |
                       [nonce-count]  | [auth-param] )

   username         = "username" "=" username-value
   username-value   = quoted-string
   digest-uri       = "uri" "=" digest-uri-value
   digest-uri-value = request-uri   ; As specified by HTTP/1.1
   message-qop      = "qop" "=" qop-value
   cnonce           = "cnonce" "=" cnonce-value
   cnonce-value     = nonce-value
   nonce-count      = "nc" "=" nc-value
   nc-value         = 8LHEX
   response         = "response" "=" request-digest
   request-digest = <"> 32LHEX <">
   LHEX             =  "0" | "1" | "2" | "3" |
                       "4" | "5" | "6" | "7" |
                       "8" | "9" | "a" | "b" |
                       "c" | "d" | "e" | "f"

The httpclient has similar issue[2] which already get fixed
[1]https://tools.ietf.org/html/rfc2617
[2]https://github.com/nahi/httpclient/issues/27