Invalidate credentials if the server rejects them.

net/http/http_auth_handler.h

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #ifndef NET_HTTP_HTTP_AUTH_HANDLER_H_
 #define NET_HTTP_HTTP_AUTH_HANDLER_H_
 #pragma once
 
 #include <string>
 
@@ skipping 33 matching lines @@
   // is required. For Digest authentication it may also mean that the previous
   // attempt used a stale nonce (and nonce-count) and that a new attempt should
   // be made with a different nonce provided in the challenge.
   //
   // |challenge| must be non-NULL and have already tokenized the
   // authentication scheme, but none of the tokens occuring after the
   // authentication scheme.
   virtual HttpAuth::AuthorizationResult HandleAnotherChallenge(
       HttpAuth::ChallengeTokenizer* challenge) = 0;
 
+  // Determine whether any cached credentials should be invalidated
+  //
+  // This method is called after this handler was used to generate a
+  // preemptive authentication response and the server responded with
+  // a challenge.  The response should indicate whether the cached
+  // credentials used to generate the preemptive authentication should
+  // be invalidated.
+  //
+  // |challenge| must be non-NULL.  The authentication scheme can be
+  // assumed to have been verified to match this handler.
+  virtual bool ShouldInvalidateRejectedAuth(
+      HttpAuth::ChallengeTokenizer* challenge);
+
   // Generates an authentication token, potentially asynchronously.
   //
   // When |username| and |password| are NULL, the default credentials for
   // the currently logged in user are used. |AllowsDefaultCredentials()| MUST be
   // true in this case.
   //
   // |request|, |callback|, and |auth_token| must be non-NULL.
   //
   // The return value is a net error code.
   // If |OK| is returned, |*auth_token| is filled in with an authentication
@@ skipping 122 matching lines @@
   void OnGenerateAuthTokenComplete(int rv);
   void FinishGenerateAuthToken();
 
   CompletionCallback* original_callback_;
   CompletionCallbackImpl<HttpAuthHandler> wrapper_callback_;
 };
 
 }  // namespace net
 
 #endif  // NET_HTTP_HTTP_AUTH_HANDLER_H_