Invalidate credentials if the server rejects them.

net/http/http_auth_handler_basic_unittest.cc

 // Copyright (c) 2010 The Chromium Authors. All rights reserved.
 // Use of this source code is governed by a BSD-style license that can be
 // found in the LICENSE file.
 
 #include <string>
 
 #include "base/basictypes.h"
 #include "base/string_util.h"
 #include "base/utf_string_conversions.h"
 #include "net/base/net_errors.h"
@@ skipping 28 matching lines @@
     string16 password(ASCIIToUTF16(tests[i].password));
     HttpRequestInfo request_info;
     std::string auth_token;
     int rv = basic->GenerateAuthToken(&username, &password, &request_info,
                                       NULL, &auth_token);
     EXPECT_EQ(OK, rv);
     EXPECT_STREQ(tests[i].expected_credentials, auth_token.c_str());
   }
 }
 
+TEST(HttpAuthHandlerBasicTest, HandleAnotherChallenge) {
+  GURL origin("http://www.example.com");
+  std::string challenge1 = "Basic realm=\"First\"";
+  std::string challenge2 = "Basic realm=\"Second\"";
+  HttpAuthHandlerBasic::Factory factory;
+  scoped_ptr<HttpAuthHandler> basic;
+  EXPECT_EQ(OK, factory.CreateAuthHandlerFromString(
+      challenge1, HttpAuth::AUTH_SERVER, origin, BoundNetLog(), &basic));
+  HttpAuth::ChallengeTokenizer tok_first(challenge1.begin(),
+                                         challenge1.end());
+  EXPECT_EQ(HttpAuth::AUTHORIZATION_RESULT_REJECT,
+            basic->HandleAnotherChallenge(&tok_first));
+
+  HttpAuth::ChallengeTokenizer tok_second(challenge2.begin(),
+                                          challenge2.end());
+  EXPECT_EQ(HttpAuth::AUTHORIZATION_RESULT_DIFFERENT_REALM,
+            basic->HandleAnotherChallenge(&tok_second));
+}
+
 TEST(HttpAuthHandlerBasicTest, InitFromChallenge) {
   static const struct {
     const char* challenge;
     int expected_rv;
     const char* expected_realm;
   } tests[] = {
     // No realm (we allow this even though realm is supposed to be required
     // according to RFC 2617.)
     {
       "Basic",
@@ skipping 61 matching lines @@
     scoped_ptr<HttpAuthHandler> basic;
     int rv = factory.CreateAuthHandlerFromString(
         challenge, HttpAuth::AUTH_SERVER, origin, BoundNetLog(), &basic);
     EXPECT_EQ(tests[i].expected_rv, rv);
     if (rv == OK)
       EXPECT_EQ(tests[i].expected_realm, basic->realm());
   }
 }
 
 }  // namespace net