qop is required in RFC 7616

Author: markt-asf

java/org/apache/tomcat/websocket/DigestAuthenticator.java

@@ -65,21 +65,17 @@ public String getAuthorization(String method, String requestUri, String authenti
         String messageQop = parameterMap.get("qop");
         String algorithm = parameterMap.get("algorithm") == null ? "MD5" : parameterMap.get("algorithm");
         String opaque = parameterMap.get("opaque");
-
-        StringBuilder challenge = new StringBuilder();
-
-        if (messageQop != null && !messageQop.isEmpty()) {
-            if (cnonceGenerator == null) {
-                synchronized (cnonceGeneratorLock) {
-                    if (cnonceGenerator == null) {
-                        cnonceGenerator = new SecureRandom();
-                    }
+        if (cnonceGenerator == null) {
+            synchronized (cnonceGeneratorLock) {
+                if (cnonceGenerator == null) {
+                    cnonceGenerator = new SecureRandom();
                 }
             }
-
-            cNonce = cnonceGenerator.nextLong();
-            nonceCount++;
         }
+        cNonce = cnonceGenerator.nextLong();
+        nonceCount++;
+
+        StringBuilder challenge = new StringBuilder();
 
         challenge.append("Digest ");
         challenge.append("username=\"").append(userName).append("\",");