Digest auth for WebDAV

shallberg · September 28, 2022

Hello,

Been using Box.com for ages, and they recently killed their WebDAV services. So I'm trying to move on to Micro Focus Filr, which has WebDAV support, but is using digest auth. Other posts suggests that Zotero supports digest, but for some reason I can't get it to work in Zotero (on MacOS, access through console and Finder works fine). All I'm getting when trying to 'Verify server' is the error 'https://[fileurl] is not a valid WebDAV address'. Any suggestions?

Bug-report: 1247987957

dstillman · September 28, 2022

Can you provide a Debug ID (different from a Report ID) for a Verify Server attempt that fails?

shallberg · September 29, 2022

Here is the Debug-ID: D234051503

Don't know if it's of any interest (I noted the 404 in the log), but in console I get this:


curl --user '[user]:[pass]' 'https://[serverurl]/my_files/' --digest
<html>
  <head>
    <title>Directory listing for my_files</title>
  </head>
  <body>
    <a href='/my_files/test'>test</a>
    <br />
    <a href='/my_files/zotero'>zotero</a>
    <br />
  </body>
</html>

dstillman · September 29, 2022

Nothing to do with Digest authentication. The problem is the response to an OPTIONS request:

(3)(+0000050): HTTP OPTIONS https://****:****@[…]/my_files/zotero/ succeeded with 404

(3)(+0000000): <html><body><h1>/my_files/zotero/ Not Found (404)</h1></body></html>

(3)(+0000001): Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Content-Type: text/html
Date: Thu, 29 Sep 2022 07:07:01 GMT
Expires: 0
Pragma: no-cache
Server: Filr
Strict-Transport-Security: max-age=31536000 ; includeSubDomains
Transfer-Encoding: chunked
X-Content-Type-Options: nosniff, nosniff
X-Frame-Options: DENY
X-XSS-Protection: 1; mode=block

The 404 is fine, but it needs to include DAV: 1 to indicate that the server supports WebDAV. From the spec:

All DAV-compliant resources MUST return the DAV header with compliance-class "1" on all OPTIONS responses.

shallberg · September 29, 2022

Right, thanks. So the problem is server side. Any clue as to what determines whether it includes this DAV: 1?

dstillman · September 29, 2022

Can't help with that, sorry.