Changeset 39 for draft-ietf-httpbis/latest/p7-auth.xml

Timestamp:

Dec 17, 2007, 4:22:08 PM (12 years ago)

Author:

fielding@…

Message:

move the p1 top-level sections "206 Partial Content" and
"416 Requested Range Not Satisfiable" into a common section
"Status Code Definitions".

Also add that top-level section to p7, and move 401 and 407 there.

Submitted by: Julian Reschke

File:

• draft-ietf-httpbis/latest/p7-auth.xml (modified) (1 diff)

draft-ietf-httpbis/latest/p7-auth.xml

@@ -192 +192 @@
 </t>
 </section>
+
+<section title="Status Code Definitions">
+<section title="401 Unauthorized" anchor="status.401">
+  <iref primary="true" item="401 Unauthorized (status code)" x:for-anchor=""/>
+  <iref primary="true" item="Status Codes" subitem="401 Unauthorized" x:for-anchor=""/>
+<t>
+   The request requires user authentication. The response &MUST; include a
+   WWW-Authenticate header field (<xref target="header.www-authenticate"/>) containing a challenge
+   applicable to the requested resource. The client &MAY; repeat the
+   request with a suitable Authorization header field (<xref target="header.authorization"/>). If
+   the request already included Authorization credentials, then the 401
+   response indicates that authorization has been refused for those
+   credentials. If the 401 response contains the same challenge as the
+   prior response, and the user agent has already attempted
+   authentication at least once, then the user &SHOULD; be presented the
+   entity that was given in the response, since that entity might
+   include relevant diagnostic information. HTTP access authentication
+   is explained in "HTTP Authentication: Basic and Digest Access
+   Authentication" <xref target="RFC2617"/>.
+</t>
+</section>
+<section title="407 Proxy Authentication Required" anchor="status.407">
+  <iref primary="true" item="407 Proxy Authentication Required (status code)" x:for-anchor=""/>
+  <iref primary="true" item="Status Codes" subitem="407 Proxy Authentication Required" x:for-anchor=""/>
+<t>
+   This code is similar to 401 (Unauthorized), but indicates that the
+   client must first authenticate itself with the proxy. The proxy &MUST;
+   return a Proxy-Authenticate header field (<xref target="header.proxy-authenticate"/>) containing a
+   challenge applicable to the proxy for the requested resource. The
+   client &MAY; repeat the request with a suitable Proxy-Authorization
+   header field (<xref target="header.proxy-authorization"/>). HTTP access authentication is explained
+   in "HTTP Authentication: Basic and Digest Access Authentication"
+   <xref target="RFC2617"/>.
+</t>
+</section>
+</section>
+
 <section title="Header Field Definitions" anchor="header.fields">
 <t>