CURLOPT_SOCKS5_AUTH.md: an access property

Reported-by: Cutiapreta on hackerone
Closes #21230
This commit is contained in:
Daniel Stenberg 2026-04-05 17:01:06 +02:00
parent 8b50c9d1cc
commit f3176e0be8
No known key found for this signature in database
GPG Key ID: 5CC908FDB71E12C2

View File

@ -33,6 +33,15 @@ authentication, *CURLAUTH_GSSAPI*, which allows GSS-API authentication, and
*CURLAUTH_NONE*, which allows no authentication. Set the actual username and
password with the CURLOPT_PROXYUSERPWD(3) option.
The specific socks authentication method is an *access property*, it does not
change the security context. This means that this option changes how the
connection and access to the proxy happens when a connection is setup, but it
does not affect which proxy connections libcurl can reuse. libcurl may reuse a
connection that was set up with a different socks authentication method. Proxy
connection reuse still depends on other properties matching, such as the
protocol, proxy hostname, port number, credentials and other settings that
affect the connection.
# DEFAULT
CURLAUTH_BASIC | CURLAUTH_GSSAPI