Invalidate credentials if the server rejects them.

net/http/http_auth_controller.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_CONTROLLER_H_
 #define NET_HTTP_HTTP_AUTH_CONTROLLER_H_
 #pragma once
 
 #include <set>
 #include <string>
@@ skipping 66 matching lines @@
   friend class base::RefCounted<HttpAuthController>;
 
   virtual ~HttpAuthController();
 
   // Searches the auth cache for an entry that encompasses the request's path.
   // If such an entry is found, updates |identity_| and |handler_| with the
   // cache entry's data and returns true.
   bool SelectPreemptiveAuth(const BoundNetLog& net_log);
 
   // Invalidates the current handler, including cache.
-  void InvalidateCurrentHandler();
+  void InvalidateCurrentHandler(const HttpResponseHeaders* headers);
 
   // Invalidates any auth cache entries after authentication has failed.
   // The identity that was rejected is |identity_|.
-  void InvalidateRejectedAuthFromCache();
+  void InvalidateRejectedAuthFromCache(const HttpResponseHeaders* headers);
 
   // Sets |identity_| to the next identity that the transaction should try. It
   // chooses candidates by searching the auth cache and the URL for a
   // username:password. Returns true if an identity was found.
   bool SelectNextAuthIdentityToTry();
 
   // Populates auth_info_ with the challenge information, so that
   // URLRequestHttpJob can prompt for a username/password.
   void PopulateAuthChallenge();
 
@@ skipping 46 matching lines @@
 
   std::set<HttpAuth::Scheme> disabled_schemes_;
 
   CompletionCallbackImpl<HttpAuthController> io_callback_;
   CompletionCallback* user_callback_;
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_CONTROLLER_H_