@hackage http-client-auth0.1.0.1

HTTP authorization (both basic and digest) done right

Multiple challenges aren't implemented. Authentication-Info header isn't either.