import java.io.*;

import java.util.*;

import java.net.*;

import java.security.*;

import sun.net.www.*;

class DigestServer extends Thread {

ServerSocket s;

Socket s1;

InputStream is;

OutputStream os;

int port;

String reply1 = "HTTP/1.1 401 Unauthorized\r\n"+

"WWW-Authenticate: Digest realm=\""+realm+"\" domain=/ "+

"nonce=\""+nonce+"\" qop=\"auth\"\r\n\r\n";

String reply2 = "HTTP/1.1 200 OK\r\n" +

"Date: Mon, 15 Jan 2001 12:18:21 GMT\r\n" +

"Server: Apache/1.3.14 (Unix)\r\n" +

"Content-Type: text/html; charset=iso-8859-1\r\n" +

"Transfer-encoding: chunked\r\n\r\n"+

"B\r\nHelloWorld1\r\n"+

"B\r\nHelloWorld2\r\n"+

"B\r\nHelloWorld3\r\n"+

"B\r\nHelloWorld4\r\n"+

"B\r\nHelloWorld5\r\n"+

"0\r\n"+

"Authentication-Info: ";

DigestServer (ServerSocket y) {

s = y;

port = s.getLocalPort();

}

public void run () {

try {

s1 = s.accept ();

is = s1.getInputStream ();

os = s1.getOutputStream ();

is.read ();

os.write (reply1.getBytes());

Thread.sleep (2000);

s1.close ();

s1 = s.accept ();

is = s1.getInputStream ();

os = s1.getOutputStream ();

is.read ();

// need to get the cnonce out of the response

MessageHeader header = new MessageHeader (is);

String raw = header.findValue ("Authorization");

HeaderParser parser = new HeaderParser (raw);

String cnonce = parser.findValue ("cnonce");

String cnstring = parser.findValue ("nc");

String reply = reply2 + getAuthorization (uri, "GET", cnonce, cnstring) +"\r\n";

os.write (reply.getBytes());

Thread.sleep (2000);

s1.close ();

} catch (Exception e) {

System.out.println (e);

e.printStackTrace();

} finally {

try { s.close(); } catch (IOException unused) {}

}

}

static char[] passwd = "password".toCharArray();

static String username = "user";

static String nonce = "abcdefghijklmnopqrstuvwxyz";

static String realm = "wallyworld";

static String uri = "/foo.html";

private String getAuthorization (String uri, String method, String cnonce, String cnstring) {

String response;

try {

response = computeDigest(false, username,passwd,realm,

method, uri, nonce, cnonce, cnstring);

} catch (NoSuchAlgorithmException ex) {

return null;

}

String value = "Digest"

+ " qop=auth\""

+ "\", cnonce=\"" + cnonce

+ "\", rspauth=\"" + response

+ "\", nc=\"" + cnstring + "\"";

return (value+ "\r\n");

}

private String computeDigest(

boolean isRequest, String userName, char[] password,

String realm, String connMethod,

String requestURI, String nonceString,

String cnonce, String ncValue

) throws NoSuchAlgorithmException

{

String A1, HashA1;

MessageDigest md = MessageDigest.getInstance("MD5");

{

A1 = userName + ":" + realm + ":";

HashA1 = encode(A1, password, md);

}

String A2;

if (isRequest) {

A2 = connMethod + ":" + requestURI;

} else {

A2 = ":" + requestURI;

}

String HashA2 = encode(A2, null, md);

String combo, finalHash;

{ /* RRC2617 when qop=auth */

combo = HashA1+ ":" + nonceString + ":" + ncValue + ":" +

cnonce + ":auth:" +HashA2;

}

finalHash = encode(combo, null, md);

return finalHash;

}

private final static char charArray[] = {

'0', '1', '2', '3', '4', '5', '6', '7',

'8', '9', 'a', 'b', 'c', 'd', 'e', 'f'

};

private String encode(String src, char[] passwd, MessageDigest md) {

md.update(src.getBytes());

if (passwd != null) {

byte[] passwdBytes = new byte[passwd.length];

for (int i=0; i<passwd.length; i++)

passwdBytes[i] = (byte)passwd[i];

md.update(passwdBytes);

Arrays.fill(passwdBytes, (byte)0x00);

}

byte[] digest = md.digest();

StringBuffer res = new StringBuffer(digest.length * 2);

for (int i = 0; i < digest.length; i++) {

int hashchar = ((digest[i] >>> 4) & 0xf);

res.append(charArray[hashchar]);

hashchar = (digest[i] & 0xf);

res.append(charArray[hashchar]);

}

return res.toString();

}

}

public class DigestTest {

static class MyAuthenticator extends Authenticator {

public MyAuthenticator () {

super ();

}

public PasswordAuthentication getPasswordAuthentication ()

{

return (new PasswordAuthentication ("user", "Wrongpassword".toCharArray()));

}

}

public static void main(String[] args) throws Exception {

int port;

DigestServer server;

ServerSocket sock;

try {

sock = new ServerSocket (0);

port = sock.getLocalPort ();

}

catch (Exception e) {

System.out.println ("Exception: " + e);

return;

}

server = new DigestServer(sock);

server.start ();

boolean passed = false;

try {

Authenticator.setDefault (new MyAuthenticator ());

String s = "http://localhost:" + port + DigestServer.uri;

URL url = new URL(s);

java.net.URLConnection conURL = url.openConnection();

InputStream in = conURL.getInputStream();

while (in.read () != -1) {}

in.close ();

} catch(ProtocolException e) {

passed = true;

}

if (!passed) {

throw new RuntimeException ("Expected a ProtocolException from wrong password");

}

}

}