Digest auth for WebDAV

edited September 28, 2022
Hello,

Been using Box.com for ages, and they recently killed their WebDAV services. So I'm trying to move on to Micro Focus Filr, which has WebDAV support, but is using digest auth. Other posts suggests that Zotero supports digest, but for some reason I can't get it to work in Zotero (on MacOS, access through console and Finder works fine). All I'm getting when trying to 'Verify server' is the error 'https://[fileurl] is not a valid WebDAV address'. Any suggestions?

Bug-report: 1247987957
  • Can you provide a Debug ID (different from a Report ID) for a Verify Server attempt that fails?
  • edited September 29, 2022
    Here is the Debug-ID: D234051503

    Don't know if it's of any interest (I noted the 404 in the log), but in console I get this:


    curl --user '[user]:[pass]' 'https://[serverurl]/my_files/'; --digest
    <html>
    <head>
    <title>Directory listing for my_files</title>
    </head>
    <body>
    <a href='/my_files/test'>test</a>
    <br />
    <a href='/my_files/zotero'>zotero</a>
    <br />
    </body>
    </html>
  • Nothing to do with Digest authentication. The problem is the response to an OPTIONS request:
    (3)(+0000050): HTTP OPTIONS https://****:****@[…]/my_files/zotero/ succeeded with 404

    (3)(+0000000): <html><body><h1>/my_files/zotero/ Not Found (404)</h1></body></html>

    (3)(+0000001): Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Content-Type: text/html
    Date: Thu, 29 Sep 2022 07:07:01 GMT
    Expires: 0
    Pragma: no-cache
    Server: Filr
    Strict-Transport-Security: max-age=31536000 ; includeSubDomains
    Transfer-Encoding: chunked
    X-Content-Type-Options: nosniff, nosniff
    X-Frame-Options: DENY
    X-XSS-Protection: 1; mode=block
    The 404 is fine, but it needs to include DAV: 1 to indicate that the server supports WebDAV. From the spec:
    All DAV-compliant resources MUST return the DAV header with compliance-class "1" on all OPTIONS responses.
  • Right, thanks. So the problem is server side. Any clue as to what determines whether it includes this DAV: 1?
  • Can't help with that, sorry.
Sign In or Register to comment.