method

validate_nonce

v4.2.9 - Show latest stable - 0 notes - Class: ActionController::HttpAuthentication::Digest

1.0.0
1.1.6
1.2.6
2.0.3
2.1.0
2.2.1
2.3.8 (0)
3.0.0 (0)
3.0.9 (-38)
3.1.0 (0)
3.2.1 (0)
3.2.8 (0)
3.2.13 (0)
4.0.2 (28)
4.1.8 (0)
4.2.1 (0)
4.2.7 (0)
4.2.9 (0)
5.0.0.1 (35)
5.1.7 (0)
5.2.3 (0)
6.0.0 (0)
6.1.3.1 (0)
6.1.7.7 (0)
7.0.0 (0)
7.1.3.2 (0)
7.1.3.4 (0)
What's this?

validate_nonce(secret_key, request, value, seconds_to_timeout=5*60) public

Might want a shorter timeout depending on whether the request is a PATCH, PUT, or POST, and if client is browser or web service. Can be much shorter if the Stale directive is implemented. This would allow a user to use new nonce without prompting user again for their username and password.

Show source

# File actionpack/lib/action_controller/metal/http_authentication.rb, line 316
      def validate_nonce(secret_key, request, value, seconds_to_timeout=5*60)
        return false if value.nil?
        t = ::Base64.decode64(value).split(":").first.to_i
        nonce(secret_key, t) == value && (t - Time.now.to_i).abs <= seconds_to_timeout
      end

validate_nonce

Related methods