Return-Path: X-Original-To: apmail-cordova-dev-archive@www.apache.org Delivered-To: apmail-cordova-dev-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id 13EA0F3BB for ; Thu, 2 May 2013 23:56:39 +0000 (UTC) Received: (qmail 37752 invoked by uid 500); 2 May 2013 23:56:38 -0000 Delivered-To: apmail-cordova-dev-archive@cordova.apache.org Received: (qmail 37727 invoked by uid 500); 2 May 2013 23:56:38 -0000 Mailing-List: contact dev-help@cordova.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cordova.apache.org Delivered-To: mailing list dev@cordova.apache.org Received: (qmail 37712 invoked by uid 99); 2 May 2013 23:56:38 -0000 Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 May 2013 23:56:38 +0000 X-ASF-Spam-Status: No, hits=-0.7 required=5.0 tests=RCVD_IN_DNSWL_LOW,SPF_PASS X-Spam-Check-By: apache.org Received-SPF: pass (athena.apache.org: domain of bowserj@gmail.com designates 209.85.212.51 as permitted sender) Received: from [209.85.212.51] (HELO mail-vb0-f51.google.com) (209.85.212.51) by apache.org (qpsmtpd/0.29) with ESMTP; Thu, 02 May 2013 23:56:33 +0000 Received: by mail-vb0-f51.google.com with SMTP id x16so956799vbf.24 for ; Thu, 02 May 2013 16:56:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:x-received:in-reply-to:references:date:message-id :subject:from:to:content-type; bh=tJxNc/w2ZaRnCcuSR2MvKI7gE6n66MtGuBcR9zWRBx8=; b=tcaPumynZSeJUW3X4VjM6BM7GMc81tpejg9RGWU/Z1AVjruc4mzpFAzD8/SL7zG9Cp opXmNaEY0mnEvbL7pft0C8r37crjs6kmw2ldKW+aJtiyFzBStDrklDgOvdV5qIRRGgXq cENKr6AqXzpD5C8yD76z1OBMOkncQkPqs0NLd3aE9nJ5W17NdjA0y/UKl9cOfE7Okq5o 1eBEjvyOJIQYohtSugV069V6np3GSsDEH8u2wR4/h2XOKEbps5Yq6OqTAuNLuVGB3JUZ Z6BSCGzPH5bLxcRi9Kh4Qy+mOMAs0QjM8kHpUlbfeT2K+TXaQnZCqu1Wk0f0RV8O/j4P fPlQ== MIME-Version: 1.0 X-Received: by 10.220.52.201 with SMTP id j9mr2974637vcg.33.1367538972977; Thu, 02 May 2013 16:56:12 -0700 (PDT) Received: by 10.221.8.196 with HTTP; Thu, 2 May 2013 16:56:12 -0700 (PDT) In-Reply-To: References: Date: Thu, 2 May 2013 16:56:12 -0700 Message-ID: Subject: Re: [iOS] XmlHttpRequest and 401 Unauthorized From: Joe Bowser To: dev Content-Type: text/plain; charset=ISO-8859-1 X-Virus-Checked: Checked by ClamAV on apache.org Applicable Android counterpart: https://issues.apache.org/jira/browse/CB-2962 On Thu, May 2, 2013 at 4:54 PM, Joe Bowser wrote: > I think this is a webkit thing, since Android has the same problem. > We have some authorization code, but I'm pretty certain that it > doesn't do the right thing. That being said, I have no idea what the > right thing is. > > On Thu, May 2, 2013 at 4:52 PM, Shazron wrote: >> To summarize, this is an iOS thing, not a Cordova thing. We are just trying >> to work around it. >> >> JIRA issue: >> https://issues.apache.org/jira/browse/CB-2415 >> >> The proposed workaround is intrusive in that we basically need to create >> our own NSURLConnection for each shouldStartLoadRequest call, and handle >> the authentication challenge by letting it proceed (thus the call does not >> "hang"). >> >> I'm not sure of the impact of this, but it touches every call. >> >> The only workaround in JavaScript is to do a setTimeout for the call, but >> then we never get a 401 status code of course. >> >> Thoughts?