The official NGINX Open Source repository.
Go to file
Maxim Dounin f74e1ea995 Multiple WWW-Authenticate headers with "satisfy any;".
If a module adds multiple WWW-Authenticate headers (ticket #485) to the
response, linked in r->headers_out.www_authenticate, all headers are now
cleared if another module later allows access.

This change is a nop for standard modules, since the only access module which
can add multiple WWW-Authenticate headers is the auth request module, and
it is checked after other standard access modules.  Though this might
affect some third party access modules.

Note that if a 3rd party module adds a single WWW-Authenticate header
and not yet modified to set the header's next pointer to NULL, attempt to
clear such a header with this change will result in a segmentation fault.
2022-05-30 21:25:56 +03:00
auto Configure: recognize arm64 machine name as a synonym for aarch64. 2022-04-29 17:38:01 +04:00
conf MIME: added image/avif type. 2021-10-25 20:49:15 +03:00
contrib Contrib: vim syntax adjusted to save cpoptions (ticket #2276). 2022-01-22 00:28:51 +03:00
docs Year 2022. 2022-02-04 13:29:31 +03:00
misc Updated OpenSSL and zlib used for win32 builds. 2022-05-24 02:51:49 +03:00
src Multiple WWW-Authenticate headers with "satisfy any;". 2022-05-30 21:25:56 +03:00
.hgtags release-1.21.6 tag 2022-01-25 18:03:52 +03:00