Invalidate credentials if the server rejects them.

net/http/http_auth_handler.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include "net/http/http_auth_handler.h"
 
 #include "base/logging.h"
+#include "base/string_util.h"
 #include "net/base/net_errors.h"
 
 namespace net {
 
 HttpAuthHandler::HttpAuthHandler()
     : auth_scheme_(HttpAuth::AUTH_SCHEME_MAX),
       score_(-1),
       target_(HttpAuth::AUTH_NONE),
       properties_(-1),
       original_callback_(NULL),
@@ skipping 21 matching lines @@
 
   // Init() is expected to set the scheme, realm, score, and properties.  The
   // realm may be empty.
   DCHECK(!ok || score_ != -1);
   DCHECK(!ok || properties_ != -1);
   DCHECK(!ok || auth_scheme_ != HttpAuth::AUTH_SCHEME_MAX);
 
   return ok;
 }
 
+// At a minimum, we check for a 'realm' directive in the
+// authentication challenge.
+bool HttpAuthHandler::ShouldInvalidateRejectedAuth(
+    HttpAuth::ChallengeTokenizer* challenge) {
+  HttpUtil::NameValuePairsIterator parameters = challenge->param_pairs();
+  std::string realm;
+  while (parameters.GetNext()) {
+    if (LowerCaseEqualsASCII(parameters.name(), "realm")) {
+      realm = parameters.value();
+      break;
+    }
+  }
+  return (realm == realm_);
+}
+
 namespace {
 
 NetLog::EventType EventTypeFromAuthTarget(HttpAuth::Target target) {
   switch (target) {
     case HttpAuth::AUTH_PROXY:
       return NetLog::TYPE_AUTH_PROXY;
     case HttpAuth::AUTH_SERVER:
       return NetLog::TYPE_AUTH_SERVER;
     default:
       NOTREACHED();
@@ skipping 38 matching lines @@
     callback->Run(rv);
 }
 
 void HttpAuthHandler::FinishGenerateAuthToken() {
   // TOOD(cbentzel): Should this be done in OK case only?
   net_log_.EndEvent(EventTypeFromAuthTarget(target_), NULL);
   original_callback_ = NULL;
 }
 
 }  // namespace net