Invalidate credentials if the server rejects them.

net/http/http_auth.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_H_
 #define NET_HTTP_HTTP_AUTH_H_
 #pragma once
 
 #include <set>
 #include <string>
@@ skipping 143 matching lines @@
   // support of the returned AuthorizationResult. If no headers were used for
   // the result (for example, all headers have unknown authentication schemes),
   // the value is cleared.
   static AuthorizationResult HandleChallengeResponse(
       HttpAuthHandler* handler,
       const HttpResponseHeaders* headers,
       Target target,
       const std::set<Scheme>& disabled_schemes,
       std::string* challenge_used);
 
+  // Check whether cached credentials should be invalidated following
+  // a rejected pre-emptive authentication attempt.
+  //
+  // |headers| must be non-NULL and contain the new HTTP response.
+  //
+  // |target| specifies whether the authentication challenge response
+  // came from a proxy or a server.
+  //
+  // |handler| must be non-NULL and specifies the handler used to
+  // generate the preemptive authentication header.
+  static bool ShouldInvalidateRejectedAuth(
+      const HttpResponseHeaders* headers,
+      Target target,
+      HttpAuthHandler* handler);
+
   // Breaks up a challenge string into the the auth scheme and parameter list,
   // according to RFC 2617 Sec 1.2:
   //    challenge = auth-scheme 1*SP 1#auth-param
   //
   // Depending on the challenge scheme, it may be appropriate to interpret the
   // parameters as either a base-64 encoded string or a comma-delimited list
   // of name-value pairs. param_pairs() and base64_param() methods are provided
   // to support either usage.
   class ChallengeTokenizer {
    public:
@@ skipping 34 matching lines @@
     std::string::const_iterator scheme_end_;
 
     std::string::const_iterator params_begin_;
     std::string::const_iterator params_end_;
   };
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_H_