Class type Http_client.auth_session

class type auth_session = object .. end

method auth_scheme : string

The authentication scheme, e.g. "basic"

method auth_domain : string list

The list of domain URIs defines the protection space.

method auth_realm : string

The realm

method auth_user : string

The user identifier

method auth_in_advance : bool

Whether "authentication in advance" is enabled

method authenticate : http_call -> (string * string) list

Returns a list of additional headers that will authenticate the passed call for this session. (This is usually only one header, authorization.)

If the call is authenticated in advance, it does not contain any authentication information. If the call is authenticated in reaction to a 401 status, the response header contains the www-authenticate field(s).

method invalidate : http_call -> bool

The session is notified that authentication failed. (This method is not called for authentication-in-advance, but only if an authentication attempt after a 401 status failed.) The method can return true if another authentication should be started immediately.

Note: By returning true the session can indicate a "stale" condition in the sense of RFC 2617.