method

expected_response

v7.2.3 - Show latest stable - Class: ActionController::HttpAuthentication::Digest

expected_response(http_method, uri, credentials, password, password_is_ha1 = true)

public

Returns the expected response for a request of `http_method` to `uri` with the decoded `credentials` and the expected `password` Optional parameter `password_is_ha1` is set to `true` by default, since best practice is to store ha1 digest instead of a plain-text password.

# File actionpack/lib/action_controller/metal/http_authentication.rb, line 248
      def expected_response(http_method, uri, credentials, password, password_is_ha1 = true)
        ha1 = password_is_ha1 ? password : ha1(credentials, password)
        ha2 = OpenSSL::Digest::MD5.hexdigest([http_method.to_s.upcase, uri].join(":"))
        OpenSSL::Digest::MD5.hexdigest([ha1, credentials[:nonce], credentials[:nc], credentials[:cnonce], credentials[:qop], ha2].join(":"))
      end

expected_response

Related methods