[Exist-open] WebDAV and HTTP Digest Authentication

[Wolfgang M. <wol...@ex...>]

Hi,

I started to implement a new webdav module for eXist over the weekend. The 
put, delete and propfind methods already work quite well, but I'm now stuck 
with the following problem: the webdav rfc states that servers should at 
least support digest access authentication (as described by rfc 2069). 
However, as I understand this rfc, it requires the server to have access to 
the clear text password of the user. Unfortunately, eXist only stores the MD5 
digest of a password, not the password itself. It thus seems impossible to me 
to compare the password digest received from the client with the digest 
password stored at the server (since both are encoded differently).

I would be happy if someone could give me an insight. Any clues?

Wolfgang