Return-Path: X-Original-To: apmail-cxf-issues-archive@www.apache.org Delivered-To: apmail-cxf-issues-archive@www.apache.org Received: from mail.apache.org (hermes.apache.org [140.211.11.3]) by minotaur.apache.org (Postfix) with SMTP id E7016E8BA for ; Wed, 6 Feb 2013 23:54:12 +0000 (UTC) Received: (qmail 81631 invoked by uid 500); 6 Feb 2013 23:54:12 -0000 Delivered-To: apmail-cxf-issues-archive@cxf.apache.org Received: (qmail 81523 invoked by uid 500); 6 Feb 2013 23:54:12 -0000 Mailing-List: contact issues-help@cxf.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@cxf.apache.org Delivered-To: mailing list issues@cxf.apache.org Received: (qmail 81514 invoked by uid 99); 6 Feb 2013 23:54:12 -0000 Received: from arcas.apache.org (HELO arcas.apache.org) (140.211.11.28) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 06 Feb 2013 23:54:12 +0000 Date: Wed, 6 Feb 2013 23:54:12 +0000 (UTC) From: "Christian Schneider (JIRA)" To: issues@cxf.apache.org Message-ID: In-Reply-To: References: Subject: [jira] [Commented] (CXF-4815) Invalid login creds will send many requests to server MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-JIRA-FingerPrint: 30527f35849b9dde25b450d4833f0394 [ https://issues.apache.org/jira/browse/CXF-4815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13573011#comment-13573011 ] Christian Schneider commented on CXF-4815: ------------------------------------------ http://svn.apache.org/viewvc?view=revision&revision=1443132 > Invalid login creds will send many requests to server > ----------------------------------------------------- > > Key: CXF-4815 > URL: https://issues.apache.org/jira/browse/CXF-4815 > Project: CXF > Issue Type: Bug > Components: Transports > Affects Versions: 2.5.9, 2.6.6, 2.7.3 > Reporter: Daniel Kulp > Assignee: Daniel Kulp > Fix For: 2.7.4, 2.6.7, 2.5.10 > > > If you set authorizations stuff in the HTTPConduit with a wrong password or username and issue a GET, 20 requests are sent to the server. For non-streaming connections (like GET), for the 401 response, the HttpURLConnection calls the Authenticator to get auth information. We create a new PasswordAuthentication object and return it each time. However, the HttpURLConnection does not compare that returned value with the previous value and will keep trying until it hits the http.maxRedirects value (default is 20). -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira