我正在尝试在我的域(实际上，它是一个子域)的/admin 下设置非常基本的摘要身份验证。我在我的 bootstrap.php 中注册了身份验证程序:

protected function _initAdminArea()
    {
        //setup protected area
        $config = array(
            'accept_schemes'    => 'digest',
            'realm'             => 'administration',
            'digest_domains'    => '/admin',
            'nonce_timeout'     => 3600
        );
        $authAdapter = new Zend_Auth_Adapter_Http($config);
        $digestResolver = new Zend_Auth_Adapter_Http_Resolver_File(APPLICATION_PATH . '/../data/admins.txt');
        $authAdapter->setDigestResolver($digestResolver);

            //set storage
        $storage = new Zend_Auth_Storage_NonPersistent();
        Zend_Auth::getInstance()->setStorage($storage);

        //dispatch auth adapter using plugin
        $loader = new Zend_Loader_PluginLoader(array('Application_Plugin' => APPLICATION_PATH . '/plugins'), 'auth');
        $AdminAuth = $loader->load('AdminAuth');
        $auth = new $AdminAuth($authAdapter);

        //register plugin
        Zend_Controller_Front::getInstance()->registerPlugin($auth);
    }

然后，我要求用户使用插件 AdminAuth.php 登录每个请求:

require_once 'Zend/Auth.php';
require_once 'Zend/Controller/Plugin/Abstract.php';
require_once 'Zend/Auth/Adapter/Interface.php';

class Application_Plugin_AdminAuth extends Zend_Controller_Plugin_Abstract
{
    /**
     * The HTTP Auth adapter
     */
    protected $adapter;


    /**
     * Constructor
     *
     * @param Zend_Auth_Adapter_Interface
     */
    public function __construct(Zend_Auth_Adapter_Interface $adapter)
    {
        $this->adapter = $adapter;
    }

    /**
     * Dispatch Loop Startup hook
     *
     * Called before Zend_Controller_Front enters its dispatch loop. This uses 
     * the authentication adapter to check if the user submitted valid login
     * credentials. If not, the request is changed to point to the 
     * authenticateAction, instead of the requested action.
     *
     * @param Zend_Controller_Request_Abstract $request
     */
    public function dispatchLoopStartup(Zend_Controller_Request_Abstract $request)
    {     
        $this->adapter->setRequest($this->_request);
        $this->adapter->setResponse($this->_response);
        $result = $this->adapter->authenticate();

        if (!$result->isValid()) {
            echo 'auth failure';
        }
    }
}

这似乎工作正常。但是，身份验证总是失败。我已经多次检查客户端和服务器 MD5 哈希值，它们都是正确的。这是 admins.txt 的样子:

peter:administration:1f7758428f7646706dbdcfe8d754427a

我还尝试将摘要更改为基本身份验证并将 MD5 哈希更改为纯文本。然而，认证仍然失败。

当我在控制台中执行以下命令时:

curl --digest -u peter:password http://sub.domain.com/admin -v

我得到以下输出:

    * About to connect() to sub.domain.com port 80 (#0)
*   Trying 83.96.149.65... connected
* Connected to sub.domain.com (83.96.149.65) port 80 (#0)
* Server auth using Digest with user 'peter'
> GET /admin HTTP/1.1
> User-Agent: curl/7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.18
> Host: sub.domain.com
> Accept: */*
> 
< HTTP/1.1 401 Authorization Required
< Date: Mon, 25 Jul 2011 14:04:38 GMT
< Server: Apache/2.2.19 (Unix)
< X-Powered-By: PHP/5.2.17
< Www-Authenticate: Digest realm="administration", domain="/admin", nonce="3f624929a274a868c0fc0188a3c49c8e", opaque="d75db7b160fe72d1346d2bd1f67bfd10", algorithm="MD5", qop="auth"
< X-Powered-By: PleskLin
< Content-Length: 1630
< Connection: close
< Content-Type: text/html
< 
* Closing connection #0
* Issue another request to this URL: 'http://sub.domain.com/admin'
* About to connect() to sub.domain.com port 80 (#0)
*   Trying 83.96.149.65... connected
* Connected to sub.domain.com (83.96.149.65) port 80 (#0)
* Server auth using Digest with user 'peter'
> GET /admin HTTP/1.1
> Authorization: Digest username="peter", realm="administration", nonce="3f624929a274a868c0fc0188a3c49c8e", uri="/admin", cnonce="MDA5ODU4", nc=00000001, qop="auth", response="28a907e1fe4b537264695bd456512f65", opaque="d75db7b160fe72d1346d2bd1f67bfd10", algorithm="MD5"
> User-Agent: curl/7.21.0 (x86_64-pc-linux-gnu) libcurl/7.21.0 OpenSSL/0.9.8o zlib/1.2.3.4 libidn/1.18
> Host: sub.domain.com
> Accept: */*
> 
< HTTP/1.1 401 Authorization Required
< Date: Mon, 25 Jul 2011 14:04:38 GMT
< Server: Apache/2.2.19 (Unix)
< X-Powered-By: PHP/5.2.17
* Authentication problem. Ignoring this.
< Www-Authenticate: Digest realm="administration", domain="/admin", nonce="3f624929a274a868c0fc0188a3c49c8e", opaque="d75db7b160fe72d1346d2bd1f67bfd10", algorithm="MD5", qop="auth"
< X-Powered-By: PleskLin
< Content-Length: 1630
< Connection: close
< Content-Type: text/html
< 
auth failure

特别注意认证问题。忽略这个。 有没有人知道可能出了什么问题？我 100% 确定提供的用户凭据是正确的(我还检查了大写字母等)。

最佳答案

我最好的猜测是您没有以 HA1 格式存储凭据。这就是Zend_Auth_Adapter_Http写道:

Digest authentication expects to receive a hash of the user's username, the realm, and their password (each separated by colons). Currently, the only supported hash algorithm is MD5.

在您的情况下，这将是:

MD5(peter:administration:password) = 1aab17d17d4ace84fcf6e2230e8775ea

关于php - Zend Digest/Basic 身份验证不断失败，我们在Stack Overflow上找到一个类似的问题： https://stackoverflow.com/questions/6817280/