Hi,

According to RFC2616 section 14.47, it should be possible to have multiple challenges in a WWW-Authenticate header. I can't see a way to achieve that with Restlet. Is there a way?

Context: I'm trying to protect a collection of resources with both HTTP Basic and a custom token-based authentication scheme. If it's not possible to have multiple challenges, I'll just challenge with Basic and then accept either form.

Thanks,
Rhett

Reply via email to