Hi,
we came across an issue where a client expects an unexpired nonce to be
flaged by the stale=true flag in the Digest Authenticate header field.
I added this to the challenge function by using flag 8. The patch is
attached. I suspect that calling pre_auth again to check whether the
nonce is stale isn't the correct way to do this and am open to suggestions.
I also looked into using the pv_*_authenticate() functions but all the
database stuff is just getting crazy.
Best regards,
Martin