Authentication Header Elements

  • Domain—A quoted, space-separated list of URIs that defines the protection space. This is an optional parameter for the "WWW-Authenticate" header.
  • Nonce—A unique string generated each time a 401/407 response is sent.
  • Qop—A mandatory parameter that is populated with a value of "auth" indicating authentication.
  • Opaque—A string of data, specified by the Oracle Communications Unified Session Manager which should be returned by the client unchanged in the Authorization header of subsequent requests with URIs in the same protection space.
  • Stale—A flag indicating that the previous request from the client was rejected because the nonce value was stale. This is set to true by the SD when it receives an invalid nonce but a valid digest for that nonce.
  • Algorithm—The Oracle Communications Unified Session Manager always sends a value of "MD5"