Closes #1476

Changes ✨ :

• Add realm as specified ¹.
• Add optional algorithm header. If not present, should use MD5, as specified ¹.

TODO:

• Implement the changes based on RFC 7616.
• Documentation.

Decisions

• I didn't add the domain parameter on the HTTPDigest class, as it's optional and I've noticed that some implementations ignores its existence.

References

• https://docs.python.org/3/library/hashlib.html
• https://en.wikipedia.org/wiki/Digest_access_authentication
• https://tools.ietf.org/html/rfc2617
• https://github.com/miguelgrinberg/Flask-HTTPAuth/blob/master/flask_httpauth.py
• https://stackoverflow.com/questions/9534602/what-is-the-difference-between-digest-and-basic-authentication

Footnotes:

1: https://tools.ietf.org/html/rfc7616#section-3.3

Updates

• 2021-04-11: Add support to algorithm and realm.