Subject: #309: credentials ABNF missing SP (still using implied LWS?)

From: Julian Reschke <[email-masked]>
Date: Wed, 27 Jul 2011 19:43:46 +0200

Hi,

James Manger found this earlier, and I just rediscovered that we have an 
inconsistency between challenge and credentials. Right now we have:

     credentials = auth-scheme ( token
         / quoted-string / #auth-param )

...which doesn't allow white space between the scheme name and the 
credentials.

Going back in history, RFC 2617 has:

   challenge   = auth-scheme 1*SP 1#auth-param

and

   credentials = auth-scheme #auth-param

(which depends on implied LWS).

Does /anybody/ remember why RFC 2617 treats these differently? Was this 
intentional?

Best regards, Julian