Invalidate credentials if the server rejects them.

net/http/http_auth.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_auth.h"
 
 #include <algorithm>
 
 #include "base/basictypes.h"
 #include "base/string_util.h"
@@ skipping 108 matching lines @@
   // Save the scheme's position.
   scheme_begin_ = tok.token_begin();
   scheme_end_ = tok.token_end();
 
   params_begin_ = scheme_end_;
   params_end_ = end;
   HttpUtil::TrimLWS(&params_begin_, &params_end_);
 }
 
 // static
+bool HttpAuth::ShouldInvalidateRejectedAuth(
+    const HttpResponseHeaders* headers,
+    Target target,
+    HttpAuthHandler* handler) {
+  const std::string header_name = GetChallengeHeaderName(target);
+  std::string cur_challenge;
+  std::string cur_scheme_name = SchemeToString(handler->auth_scheme());
+  void* iter = NULL;
+
+  while (headers->EnumerateHeader(&iter, header_name, &cur_challenge)) {
+    ChallengeTokenizer props(cur_challenge.begin(), cur_challenge.end());
+
+    if (LowerCaseEqualsASCII(props.scheme(), cur_scheme_name.c_str()) &&
+        handler->ShouldInvalidateRejectedAuth(&props))
+      return true;
+  }
+  return false;
+}
+
+// static
 std::string HttpAuth::GetChallengeHeaderName(Target target) {
   switch (target) {
     case AUTH_PROXY:
       return "Proxy-Authenticate";
     case AUTH_SERVER:
       return "WWW-Authenticate";
     default:
       NOTREACHED();
       return "";
   }
@@ skipping 37 matching lines @@
   COMPILE_ASSERT(arraysize(kSchemeNames) == AUTH_SCHEME_MAX,
                  http_auth_scheme_names_incorrect_size);
   if (scheme < AUTH_SCHEME_BASIC || scheme >= AUTH_SCHEME_MAX) {
     NOTREACHED();
     return "invalid_scheme";
   }
   return kSchemeNames[scheme];
 }
 
 }  // namespace net