Coding an HTTPS request with authentication

[VeloWulf]

@toggledbits

I've embellished on your code a little as well to support other hashes. It's possible for the server to return multiple www-authenticate headers, each with a different supported algorithm, and the client is expected to choose. MD5 has fallen from grace.

Sounds good. Please feel free to create a pull request on the repo with any suggested changes - all contributions are very welcome!

@toggledbits

Just something I noticed right away, the opaque is not required in a server response, so you need to guard for not getting it and trying to send it back (null exception will be thrown).

That is interesting - at the moment I am coding for the specific API servers which (touch wood) have so far responded with the opaque info but I will bear this in mind. I have noticed that even within the same API ecosystem the www-auth response varies in composition.

@toggledbits

Do you happen to know if there's any persistent/static storage for a driver outside of the state structure and the device attributes? The www-authenticate information can be stored so subsequent requests can use them to build auth headers up front, but I'm not sure where to keep it (state gets displayed in the UI, so not great)

I attempt to do something similar with the latest version of the code (will commit the latest shortly but is still WIP so bear that in mind). The particular service that I have to use always returns a 401 when talking to the first [director] server so the response needs to be constructed afresh each time. The latest code moves onto the next server (that I call the ASN server) where 200 codes are returned and there is merit in constructing an auth header from stored values. Have a look and let me know what you think.

I can appreciate your point regarding the state variable being visible but from my perspective this is an acceptable security risk. You could always use @thebearmay idea of encryption or explore using th new concept of hub variables brought in with 2.2.8

P.S. if you are creating a driver then you might want to take a look at some of the earlier examples posted by @tomw. I do plan on creating a driver as well once I have the app working but it is slow going for me!