结合使用NSURLCredentialStorage和同步NSURLConnection

Question

I am having a problem very similar to this question here: Can I use NSURLCredentialStorage for HTTP Basic Authentication?

The author of that question accepted an answer but later posted that the solution code was returning NSURLErrorUserCancelledAuthentication errors. I am using DIGEST authentication, but otherwise my code is doing the same thing, and returns the same error.

I do not want to send the username and password in cleartext, so I definitely don't want to simply tack the username and password onto the front of the URL. Is there some way to get NSURLConnection's sendSynchronousRequest:returningResponse:error: method to consult the shared NSURLCredentialStorage? It sounds like the type of thing a category would be good for, but I haven't the faintest idea of how I would do it--it sounds like I'd have to completely reimplement the sendSynchronousRequest:returningResponse:error: method to get it to work.

How can I perform a synchronous URL connection that consults the shared NSURLCredentialStorage?

Answer 1

Absolutely you can. Create your NSURLCredential, and add to NSURLCredentialStorage as the default for the protection space. Example:

// Permananent, session, whatever.
NSURLCredential *credential = [NSURLCredential credentialWithUser:username password:password persistence: NSURLCredentialPersistencePermanent];
// Make sure that if the server you are accessing presents a realm, you set it here.
NSURLProtectionSpace *protectionSpace = [[NSURLProtectionSpace alloc] initWithHost:@"blah.com" port:0 protocol:@"http" realm:nil authenticationMethod:NSURLAuthenticationMethodHTTPBasic];
// Store it
[[NSURLCredentialStorage sharedCredentialStorage] setDefaultCredential:credential forProtectionSpace:protectionSpace];

At this point, any subsequent NSURLConnection that is challenged using a protection space that matches what you set will use this credential

Answer 2

这可能无法完全回答您的问题，但是：通过NSURLConnection进行的同步抓取有很多问题（身份验证是至少一个问题），并且如果有可能，您应该真正地重组应用程序以使用异步API，这很可能不会您遇到有关身份验证的问题。