DigestAuthenticator returning 401 when the nonce isn't valid anymore

[rburgst]

DigestAuthenticator returning 401 when the nonce isn't valid anymore

[rburgst]

Hi
I don't quite understand your scenario. Why is the nonce invalidated?
Can you send a concrete example or create a unit test that shows it?

Thanks

[N4zroth]

Hi,
sure I'll do that as soon as I'm in the office on monday.
I basically send and successfully authenticate a request which has a nonce that's valid for five seconds. The cache saves the authentication and tries to reuse it when I issue another request ten seconds later. The nonce isn't valid anymore as ten seconds have passed and thus the authentication fails. The Authenticator treats this as wrong password and aborts authentication completely even though password and user name were correct, only the saved nonce had timed out.
Greetings :)

[rburgst]

This is indeed a bug and I need to fix it, in the meantime its probably good for you to roll back to the previous version.