Update authorisation header and extend www-auth with digest

[hamishwillee]

This is continued update or HTTP authorisation docs for #8682

This updates the WWW-Authenticate and Authorization header docs with additional information. These headers are part of a framework, so the directives depend on the authentication method used. Prior to these updates the headers were written as though only the Basic authentication existed.

What I have tried to do is make this framework more obvious by including the directives and examples for both Basic and Digest authentication.

Part of the way though though I realised that it is very difficult to do justice to the Digest authentication - yes I could capture the entire algorithm, but the spec is pretty dense. I don't think we want to go to the point where people think this replaces the spec. What I want to do is give an overview that gives a good flavour of how it works, but makes it pretty clear that you do need to go to the spec if you're going to do anything more than superficial.

In other words, I don't think this is perfect, but I think it is better. Thoughts?

This part is pretty much done for now. I am planning on updating the BCD mdn/browser-compat-data#12446 to give better links into the spec. That is actually likely to be the most valuable part of this effort :-0

[hamishwillee]

Note, I have BCD item in progress to add these. Still under discussion. This is kind of "interim solution".

[github-actions]

Preview URLs

• https://pr9014.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Authentication
• https://pr9014.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/Authorization
• https://pr9014.content.dev.mdn.mozit.cloud/en-US/docs/Web/HTTP/Headers/WWW-Authenticate

Flaws

Note! 2 documents with no flaws that don't need to be listed. 🎉

URL: /en-US/docs/Web/HTTP/Headers/Authorization
Title: Authorization
on GitHub
Flaw count: 1

• bad_bcd_queries:
  • No BCD data for query: http.headers.Authorization

External URLs

URL: /en-US/docs/Web/HTTP/Headers/WWW-Authenticate
Title: WWW-Authenticate
on GitHub

• 🚨 http://www.example.org/dir/index.html (1 time) (Note! This may be a new URL 👀)

---

URL: /en-US/docs/Web/HTTP/Headers/Authorization
Title: Authorization
on GitHub

No new external URLs

---

URL: /en-US/docs/Web/HTTP/Authentication
Title: HTTP authentication
on GitHub

• https://docs.aws.amazon.com/AmazonS3/latest/API/sigv4-auth-using-authorization-header.html (1 time) (Note! This may be a new URL 👀)
• https://www.ietf.org/rfc/rfc4559.txt (1 time) (Note! This may be a new URL 👀)

(this comment was updated 2021-09-20 07:15:31.241031)

[hamishwillee]

It doesn't sit well with me that this you still need to go to the spec to get detail. But it is still better than it was/more useful than over-promoting the basic authentication.

So, merging.