Examples of ProxyAuthenticateHeader

javax.sip.header.ProxyAuthenticateHeader

A Proxy-Authenticate header field value contains an authentication challenge. When a UAC sends a request to a proxy server, the proxy server MAY authenticate the originator before the request is processed. If no credentials (in the Proxy-Authorization header field) are provided in the request, the proxy can challenge the originator to provide credentials by rejecting the request with a 407 (Proxy Authentication Required) status code. The proxy MUST populate the 407 (Proxy Authentication Required) message with a Proxy-Authenticate header field value applicable to the proxy for the requested resource. The field value consists of a challenge that indicates the authentication and parameters applicable to the proxy for this RequestURI.

Note - Unlike its usage within HTTP, the ProxyAuthenticateHeader must be passed upstream in the Response to the UAC. In SIP, only UAC's can authenticate themselves to proxies.

Proxies MUST NOT add values to the Proxy-Authorization header field. All 407 (Proxy Authentication Required) responses MUST be forwarded upstream toward the UAC following the procedures for any other response. It is the UAC's responsibility to add the Proxy-Authorization header field value containing credentials for the realm of the proxy that has asked for authentication.

When the originating UAC receives the 407 (Proxy Authentication Required) it SHOULD, if it is able, re-originate the request with the proper credentials. It should follow the same procedures for the display of the "realm" parameter that are given above for responding to 401. If no credentials for a realm can be located, UACs MAY attempt to retry the request with a username of "anonymous" and no password (a password of ""). The UAC SHOULD also cache the credentials used in the re-originated request.

For Example:
Proxy-Authenticate: Digest realm="jcp.org", domain="sip:ss1.duke.com", qop="auth", nonce="f84f1cec41e6cbe5aea9c8e88d359", opaque="", stale=FALSE, algorithm=MD5 @see Parameters @see ProxyAuthorizationHeader @author BEA Systems, NIST @version 1.2

org.zoolu.sip.header.ProxyAuthenticateHeader

SIP Proxy-Authenticate header


      // Now can begin to build the authentication header using a MD5
      // digest scheme
      WWWAuthenticateHeader wwwAuthenticateHeader = (WWWAuthenticateHeader) response
          .getHeader(WWWAuthenticateHeader.NAME);
      ProxyAuthenticateHeader proxyAuthenticateHeader = (ProxyAuthenticateHeader) response
          .getHeader(ProxyAuthenticateHeader.NAME);


      String realm = null;
      String nonce = null;
      // Check whether we've received an wwwAuthenticationHeader
      // or a ProxyAuthenticationHeader from the proxy server
      if (wwwAuthenticateHeader != null) {
        if (log.isDebugEnabled()) {
          log.debug("wwwAuthenticateHeader found!");
        }
        // Retrieve the realm from the authentication header
        realm = wwwAuthenticateHeader.getRealm();
        // Retrieve the nonce from the wwwAuthenticateHeader
        nonce = wwwAuthenticateHeader.getNonce();


      } else if (proxyAuthenticateHeader != null) {
        if (log.isDebugEnabled()) {
          log.debug("ProxyAuthenticateHeader found!");
        }
        // Retrieve the realm from the authentication header
        realm = proxyAuthenticateHeader.getRealm();
        // Retrieve the nonce from the wwwAuthenticateHeader
        nonce = proxyAuthenticateHeader.getNonce();
      } else {
        if (log.isDebugEnabled()) {
          log
              .debug("Neither a ProxyAuthenticateHeader or AuthorizationHeader found!");
        }

         if (type==SERVER_AUTHENTICATION) result=401; // response code 401 ("Unauthorized")
         else result=407; // response code 407 ("Proxy Authentication Required")
         err_resp=MessageFactory.createResponse(msg,result,SipResponses.reasonOf(result),null);
         WwwAuthenticateHeader wah;
         if (type==SERVER_AUTHENTICATION) wah=new WwwAuthenticateHeader("Digest");
         else wah=new ProxyAuthenticateHeader("Digest");
         wah.addRealmParam(realm);
         wah.addQopOptionsParam(qop_options);
         wah.addNonceParam(HEX(rand));
         err_resp.setWwwAuthenticateHeader(wah); 
      }

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.

Examples of ProxyAuthenticateHeader

Examples of javax.sip.header.ProxyAuthenticateHeader

Examples of org.zoolu.sip.header.ProxyAuthenticateHeader