Invalidate credentials if the server rejects them.

net/http/http_auth_handler.h

Index: net/http/http_auth_handler.h
diff --git a/net/http/http_auth_handler.h b/net/http/http_auth_handler.h
index 0a574e5a667673394b9c5a003b1d8e5e6950fe62..4fc8419a8a03f3758c92d0a3754a214533814844 100644
--- a/net/http/http_auth_handler.h
+++ b/net/http/http_auth_handler.h
@@ -51,6 +51,19 @@ class HttpAuthHandler {
   virtual HttpAuth::AuthorizationResult HandleAnotherChallenge(
       HttpAuth::ChallengeTokenizer* challenge) = 0;
 
+  // Determine whether any cached credentials should be invalidated
+  //
+  // This method is called after this handler was used to generate a
+  // preemptive authentication response and the server responded with
+  // a challenge.  The response should indicate whether the cached
+  // credentials used to generate the preemptive authentication should
+  // be invalidated.
+  //
+  // |challenge| must be non-NULL.  The authentication scheme can be
+  // assumed to have been verified to match this handler.
+  virtual bool ShouldInvalidateRejectedAuth(
+      HttpAuth::ChallengeTokenizer* challenge);
+
   // Generates an authentication token, potentially asynchronously.
   //
   // When |username| and |password| are NULL, the default credentials for