Struct DigestAuthProvider 

pub struct DigestAuthProvider { /* private fields */ }

Digest authentication provider implementing RFC 7616.

This provider handles the complex challenge-response protocol required for Digest authentication, including:

• HA1 computation (hash of username:realm:password)
• HA2 computation (hash of method:uri or method:uri:entity_hash)
• Response computation (KD function combining HA1 with challenge parameters)
• Atomic nonce counter management for replay attack prevention

Implementations

impl DigestAuthProvider

pub fn new( username: String, password: String, algorithm: Option<DigestAlgorithm>, ) -> Self

Creates a new Digest authentication provider.

Arguments

• username - The username for authentication
• password - The password for authentication
• algorithm - The hash algorithm to use (defaults to MD5)

pub fn algorithm(&self) -> DigestAlgorithm

Returns the current hash algorithm being used.

pub fn compute_ha1(&self, realm: &str) -> String

Computes HA1 = H(username:realm:password).

This is the first step in Digest authentication response calculation. The hash algorithm depends on the provider’s configured algorithm.

Arguments

• realm - The realm from the authentication challenge

Returns

Hex-encoded hash string

pub fn compute_ha2( &self, method: &str, uri: &str, qop: Option<&str>, entity_body: Option<&[u8]>, ) -> String

Computes HA2 = H(method:uri) or H(method:uri:H(entity-body)).

When qop is “auth-int”, includes the hash of the entity body.

Arguments

• method - HTTP method (GET, POST, etc.)
• uri - Request URI
• qop - Quality of protection mode
• entity_body - Optional entity body for auth-int mode

Returns

Hex-encoded hash string

pub fn compute_response( &self, ha1: &str, nonce: &str, nonce_count: &str, cnonce: &str, qop: Option<&str>, ha2: &str, ) -> String

Computes the final response = KD(HA1, nonce:nc:cnonce:qop:HA2).

KD(secret, data) = H(concat(secret, “:”, data))

Arguments

• ha1 - Pre-computed HA1 value
• nonce - Server-provided nonce
• nonce_count - Hex-encoded 8-digit nonce count
• cnonce - Client-generated nonce
• qop - Quality of protection mode
• ha2 - Pre-computed HA2 value

Returns

Hex-encoded response string

pub fn build_authorization_header_with_method( &self, challenge: &AuthChallenge, method: &str, uri: &str, entity_body: Option<&[u8]>, ) -> Result<String>

Builds a complete Digest Authorization header value.

Constructs all necessary components including:

• Username, realm, nonce, uri
• Algorithm specification
• Response hash
• Optional: qop, nc, cnonce, opaque

Arguments

• challenge - Server authentication challenge
• method - HTTP method for the request
• uri - Request URI
• entity_body - Optional entity body for auth-int

Returns

Complete Authorization header value starting with “Digest “

pub fn reset_nonce_counter(&self)

Resets the nonce counter (useful for testing or new sessions).

Trait Implementations

impl AuthProvider for DigestAuthProvider

fn scheme(&self) -> AuthScheme

Returns the authentication scheme this provider implements.

fn build_authorization_header( &self, _challenge: &AuthChallenge, ) -> Result<String>

Builds an Authorization header value based on the server’s challenge.