If challenges are returned in a single header with spaces after the comma, the parsed challenges are invalid.
Example:
WWW-Authenticate: Foo realm="Realm", Bar realm="Realm"
Will be parsed into a challenge with the scheme ' Bar realm="Realm"' and a challenge '' and challenge with scheme 'Foo' and the challenge 'realm="Realm"'.
If challenges are returned in a single header with spaces after the comma, the parsed challenges are invalid. Example:
Will be parsed into a challenge with the scheme
' Bar realm="Realm"'
and a challenge''
and challenge with scheme'Foo'
and the challenge'realm="Realm"'
.