[AC-404] HTTP Digest Authentication (NTML) breaks on iOS 8.3
| GitHub Issue | n/a |
|---|---|
| Type | Bug |
| Priority | n/a |
| Status | Resolved |
| Resolution | Hold |
| Resolution Date | 2015-11-29T08:54:22.000+0000 |
| Affected Version/s | n/a |
| Fix Version/s | n/a |
| Components | Titanium SDK & CLI |
| Labels | ios, triage |
| Reporter | Jeff Bonnes |
| Assignee | Shak Hossain |
| Created | 2015-04-20T02:23:44.000+0000 |
| Updated | 2015-11-29T08:54:22.000+0000 |
Description
Since upgrading devices to iOS 8.3, NTML authentication no longer works. I have attached a simple app.js file that illustrates the issue. I've given the password to Ingo to add as a private comment. This code works on iOS 8.2, but does not work on iOS 8.3. I've also attached Charles proxy output that shows the conversation between the server and app in both iOS versions. With iOS8.2: - the app makes a request to the server - The server responds with a 401 and qop="auth" string as expected - The app requests again with the Authorization: Digest header set - The server returns a valid response 200 With iOS8.3 - the app makes a request to the server - The server responds with a 401 and qop="auth" string as expected - The app requests again with the Authorization: Digest header set. However, the nc = 00000002 in the Authorization header. In iOS 8.2, nc=00000001 - The server returns a 401 with a stale=true param in the qop="auth" header.Attachments
| File | Date | Size |
|---|---|---|
| app.js | 2015-04-20T02:23:44.000+0000 | 928 |
| CharlesProxy.txt | 2015-04-20T02:23:44.000+0000 | 3901 |