Class: Rack::Auth::Digest::MD5

### Home Classes Methods

### In Files

- lib/rack/auth/digest/md5.rb

### Parent

Rack::Auth::AbstractHandler

### Methods

- ::new
- #call
- #passwords_hashed?

### Files

- KNOWN-ISSUES
- README
- SPEC

### Class/Module Index

Quicksearch

- Rack
- Rack::Auth
- Rack::Auth::AbstractHandler
- Rack::Auth::AbstractRequest
- Rack::Auth::Basic
- Rack::Auth::Basic::Request
- Rack::Auth::Digest
- Rack::Auth::Digest::MD5
- Rack::Auth::Digest::Nonce
- Rack::Auth::Digest::Params
- Rack::Auth::Digest::Request
- Rack::Builder
- Rack::Cascade
- Rack::Chunked
- Rack::CommonLogger
- Rack::ConditionalGet
- Rack::Config
- Rack::ContentLength
- Rack::ContentType
- Rack::Deflater
- Rack::Deflater::DeflateStream
- Rack::Deflater::GzipStream
- Rack::Directory
- Rack::ETag
- Rack::File
- Rack::ForwardRequest
- Rack::Handler
- Rack::Handler::CGI
- Rack::Handler::EventedMongrel
- Rack::Handler::FastCGI
- Rack::Handler::LSWS
- Rack::Handler::Mongrel
- Rack::Handler::SCGI
- Rack::Handler::SwiftipliedMongrel
- Rack::Handler::Thin
- Rack::Handler::WEBrick
- Rack::Head
- Rack::Lint
- Rack::Lobster
- Rack::Lock
- Rack::Logger
- Rack::MethodOverride
- Rack::Mime
- Rack::MockRequest
- Rack::MockRequest::FatalWarner
- Rack::MockRequest::FatalWarning
- Rack::MockResponse
- Rack::NullLogger
- Rack::Recursive
- Rack::Reloader
- Rack::Reloader::Stat
- Rack::Request
- Rack::Response
- Rack::Response::Helpers
- Rack::RewindableInput
- Rack::RewindableInput::Tempfile
- Rack::Runtime
- Rack::Sendfile
- Rack::Server
- Rack::Server::Options
- Rack::Session
- Rack::Session::Abstract
- Rack::Session::Abstract::ID
- Rack::Session::Cookie
- Rack::Session::Memcache
- Rack::Session::Pool
- Rack::ShowExceptions
- Rack::ShowStatus
- Rack::Static
- Rack::URLMap
- Rack::Utils
- Rack::Utils::Context
- Rack::Utils::HeaderHash
- Rack::Utils::Multipart
- Rack::Utils::Multipart::UploadedFile
- FCGI
- FCGI::Stream

No matching classes.

# Rack::Auth::Digest::MD5

Rack::Auth::Digest::MD5 implements the MD5 algorithm version of HTTP Digest Authentication, as per RFC 2617.

Initialize with the [Rack] application that you want protecting, and a block that looks up a plaintext password for a given username.

`opaque` needs to be set to a constant base64/hexadecimal string.

### Constants

QOP

### Attributes

opaque[RW]
passwords_hashed[W]

### Public Class Methods

new(*args) click to toggle source

    # File lib/rack/auth/digest/md5.rb, line 24
    def initialize(*args)
      super
      @passwords_hashed = nil
    end

### Public Instance Methods

call(env) click to toggle source

    # File lib/rack/auth/digest/md5.rb, line 33
    def call(env)
      auth = Request.new(env)

      unless auth.provided?
        return unauthorized
      end

      if !auth.digest? || !auth.correct_uri? || !valid_qop?(auth)
        return bad_request
      end

      if valid?(auth)
        if auth.nonce.stale?
          return unauthorized(challenge(:stale => true))
        else
          env['REMOTE_USER'] = auth.username

          return @app.call(env)
        end
      end

      unauthorized
    end

passwords_hashed?() click to toggle source

    # File lib/rack/auth/digest/md5.rb, line 29
    def passwords_hashed?
      !!@passwords_hashed
    end

[Validate]

Generated with the Darkfish Rdoc Generator 2.