gi-soup-2.4.14: Libsoup bindings

CopyrightWill Thompson Iñaki García Etxebarria and Jonas Platte
LicenseLGPL-2.1
MaintainerIñaki García Etxebarria (garetxe@gmail.com)
Safe HaskellNone
LanguageHaskell2010

GI.Soup.Objects.AuthDomainDigest

Contents

Description

 

Synopsis

Exported types

Methods

encodePassword

authDomainDigestEncodePassword Source #

Arguments

:: (HasCallStack, MonadIO m) 
=> Text

username: a username

-> Text

realm: an auth realm name

-> Text

password: the password for username in realm

-> m Text

Returns: the encoded password

Encodes the username/realm/password triplet for Digest authentication. (That is, it returns a stringified MD5 hash of username, realm, and password concatenated together). This is the form that is needed as the return value of 'GI.Soup.Objects.AuthDomainDigest.AuthDomainDigest'\'s auth handler.

For security reasons, you should store the encoded hash, rather than storing the cleartext password itself and calling this method only when you need to verify it. This way, if your server is compromised, the attackers will not gain access to cleartext passwords which might also be usable at other sites. (Note also that the encoded password returned by this method is identical to the encoded password stored in an Apache .htdigest file.)

Properties

authCallback

authData