equal
deleted
inserted
replaced
13 * to license@zend.com so we can send you a copy immediately. |
13 * to license@zend.com so we can send you a copy immediately. |
14 * |
14 * |
15 * @category Zend |
15 * @category Zend |
16 * @package Zend_Auth |
16 * @package Zend_Auth |
17 * @subpackage Zend_Auth_Adapter_Http |
17 * @subpackage Zend_Auth_Adapter_Http |
18 * @copyright Copyright (c) 2005-2010 Zend Technologies USA Inc. (http://www.zend.com) |
18 * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com) |
19 * @license http://framework.zend.com/license/new-bsd New BSD License |
19 * @license http://framework.zend.com/license/new-bsd New BSD License |
20 * @version $Id: Http.php 23088 2010-10-11 19:53:24Z padraic $ |
20 * @version $Id: Http.php 24593 2012-01-05 20:35:02Z matthew $ |
21 */ |
21 */ |
22 |
22 |
23 |
23 |
24 /** |
24 /** |
25 * @see Zend_Auth_Adapter_Interface |
25 * @see Zend_Auth_Adapter_Interface |
33 * Implements a pretty good chunk of RFC 2617. |
33 * Implements a pretty good chunk of RFC 2617. |
34 * |
34 * |
35 * @category Zend |
35 * @category Zend |
36 * @package Zend_Auth |
36 * @package Zend_Auth |
37 * @subpackage Zend_Auth_Adapter_Http |
37 * @subpackage Zend_Auth_Adapter_Http |
38 * @copyright Copyright (c) 2005-2010 Zend Technologies USA Inc. (http://www.zend.com) |
38 * @copyright Copyright (c) 2005-2012 Zend Technologies USA Inc. (http://www.zend.com) |
39 * @license http://framework.zend.com/license/new-bsd New BSD License |
39 * @license http://framework.zend.com/license/new-bsd New BSD License |
40 * @todo Support auth-int |
40 * @todo Support auth-int |
41 * @todo Track nonces, nonce-count, opaque for replay protection and stale support |
41 * @todo Track nonces, nonce-count, opaque for replay protection and stale support |
42 * @todo Support Authentication-Info header |
42 * @todo Support Authentication-Info header |
43 */ |
43 */ |
842 } |
842 } |
843 $temp = null; |
843 $temp = null; |
844 |
844 |
845 return $data; |
845 return $data; |
846 } |
846 } |
847 |
847 |
848 /** |
848 /** |
849 * Securely compare two strings for equality while avoided C level memcmp() |
849 * Securely compare two strings for equality while avoided C level memcmp() |
850 * optimisations capable of leaking timing information useful to an attacker |
850 * optimisations capable of leaking timing information useful to an attacker |
851 * attempting to iteratively guess the unknown string (e.g. password) being |
851 * attempting to iteratively guess the unknown string (e.g. password) being |
852 * compared against. |
852 * compared against. |