On Thu, Oct 23, 2008 at 04:24:00PM -0700, Dan Fandrich wrote:
> On Fri, Oct 24, 2008 at 12:41:58AM +0200, Josef Wolf wrote:
> > On Thu, Oct 23, 2008 at 10:19:27PM +0200, Daniel Stenberg wrote:
> > > I wonder if a auth type (Basic, Digest, NTLM etc) would
> > > be wanted as well.
> >
> > What would this be used for?
>
> Determining whether this form of authentication is desired (e.g. to
> disable unencrypted Basic),

But this functionality already exists in libcurl. Should the application
duplicate it?

> or maybe to delegate an authentication server to handle some forms.

Maybe it's more about which _sort_ of credentials are requested,
user+password or client-certificate or whatever.

> > Huh? So libcurl already tries to repeat the request with different
> > credentials? This sounds like I have missed something important in
> > the documentation? Can you please drop some hints about how 401/407
> > is handled right now?
>
> Take a look at curl's --anyauth option.

So that's implemented in curl, not in libcurl?
Received on 2008-10-24