KHTTPDIGEST_VALIDATE(3)

💅 KHTTPDIGEST_VALIDATE(3) — the libkcgi girlies' guide to validating HTTP digest requests 🌸

okay so this is a page from the Library Functions Manual, and it's about khttpdigest_validate and khttpdigest_validatehash — yes they're two functions, yes they share a page, it's giving sibling energy 👑.

---

✨ NAME ✨

khttpdigest_validate, khttpdigest_validatehash — validate an HTTP digest request 🎀

📚 LIBRARY 📚

she lives in the library “libkcgi” 💖

🦋 SYNOPSIS 🦋

bestie, here's the exact vibe you need to include, copy it character for character:

#include <sys/types.h>
#include <stdarg.h>
#include <stdint.h>
#include <kcgi.h>

int
khttpdigest_validate(struct kreq *req, const char *password);

int
khttpdigest_validatehash(struct kreq *req, const char *hash);

🌈 DESCRIPTION 🌈

so the way that khttpdigest_validate() and khttpdigest_validatehash() work is they validate the given password (or a pre-combined hash) against the HTTP digest-authorised request req — and like, req has to be the one you got back from khttp_parse(3) or khttp_fcgi_parse(3), no substitutions 🫶. It fully implements all components of the digest: QOP, MD5 types, etc. — she ate and left no crumbs 💅.

⚠️ important caveat bestie: it does not check that the URI component of the digest matches that of the request, because those values are known to be mutable. so like, don't come for her about that, it's on purpose 🙈.

The tea on the difference between the two: khttpdigest_validate() will compute a hash from the request and password, whereas khttpdigest_validatehash() operates on a pre-computed hash value 🔥. same energy, different starting point, iykyk.

⭐ RETURN VALUES ⭐

khttpdigest_validate() and khttpdigest_validatehash() will return:

• zero — validation failed 😭
• less than zero — the request was not properly set up for HTTP digest validation (no HTTP method, not a digest request, not already authenticated by the web server) 💀
• greater than zero — validation succeeded, slay ✨🎀

🧚 SEE ALSO 🧚

• kcgi(3)
• khttp_fcgi_parse(3)
• khttp_parse(3)
• khttpbasic_validate(3)

go read those, they're the supporting cast and they also serve 💜

👑 AUTHORS 👑

The khttpdigest_validate() and khttpdigest_validatehash() functions were written by Kristaps Dzonsons <kristaps@bsd.lv> — absolute main character energy, we stan 🫶🌸

---

and that's the whole page bestie, no cap 💖 ok bye, this shipped on Debian with version $Mdocdate$ under the KHTTPDIGEST_VALIDATE(3) footer, mwah 😘💅