Digest Authentication
Introduction
Digest authentication
is a method of HTTP authentication that improves upon
Basic authentication
by providing a way to authenticate without having to transmit the password in clear text across
the network.
This adapter allows authentication against text files containing lines having the basic elements
of Digest authentication:
username, such as "joe.user"
realm, such as "Administrative Area"
MD5 hash of the username, realm, and password, separated by colons
The above elements are separated by colons, as in the following example (in which the password is
"somePassword"):
Specifics
The digest authentication adapter, Zend_Auth_Adapter_Digest, requires several input parameters:
filename - Filename against which authentication queries are performed
realm - Digest authentication realm
username - Digest authentication user
password - Password for the user of the realm
These parameters must be set prior to calling authenticate().
Identity
The digest authentication adapter returns a Zend_Auth_Result object, which has been
populated with the identity as an array having keys of realm and
username. The respective array values associated with these keys correspond to the
values set before authenticate() is called.
authenticate();
$identity = $result->getIdentity();
print_r($identity);
/*
Array
(
[realm] => Some Realm
[username] => someUser
)
*/
]]>