Return-Path: Delivered-To: apmail-jakarta-commons-httpclient-dev-archive@www.apache.org Received: (qmail 94183 invoked from network); 12 Jun 2004 19:12:51 -0000 Received: from hermes.apache.org (HELO mail.apache.org) (209.237.227.199) by minotaur-2.apache.org with SMTP; 12 Jun 2004 19:12:51 -0000 Received: (qmail 74064 invoked by uid 500); 12 Jun 2004 19:12:53 -0000 Delivered-To: apmail-jakarta-commons-httpclient-dev-archive@jakarta.apache.org Received: (qmail 73977 invoked by uid 500); 12 Jun 2004 19:12:52 -0000 Mailing-List: contact commons-httpclient-dev-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Commons HttpClient Project" Reply-To: "Commons HttpClient Project" Delivered-To: mailing list commons-httpclient-dev@jakarta.apache.org Received: (qmail 73961 invoked by uid 99); 12 Jun 2004 19:12:52 -0000 Received: from [192.18.33.10] (HELO exchange.sun.com) (192.18.33.10) by apache.org (qpsmtpd/0.27.1) with SMTP; Sat, 12 Jun 2004 12:12:52 -0700 Received: (qmail 27597 invoked by uid 50); 12 Jun 2004 19:13:52 -0000 Date: 12 Jun 2004 19:13:52 -0000 Message-ID: <20040612191352.27596.qmail@nagoya.betaversion.org> From: bugzilla@apache.org To: commons-httpclient-dev@jakarta.apache.org Cc: Subject: DO NOT REPLY [Bug 29439] - Credentials ignored if realm specified in preemptive authentication X-Virus-Checked: Checked X-Spam-Rating: minotaur-2.apache.org 1.6.2 0/1000/N DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT . ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE. http://issues.apache.org/bugzilla/show_bug.cgi?id=29439 Credentials ignored if realm specified in preemptive authentication ------- Additional Comments From olegk@apache.org 2004-06-12 19:13 ------- > - The various static variables in AuthScope should be final I think My oversight. Will be corrected. > - HttpState.matchCredentials() doesn't handle all combinations of AuthScopes. HttpState.matchCredentials() is clearly broken as it is. Besides, it generates unnecessary garbage pretty much per every invocation. Do you mind if I submit the patch and deal with broken HttpState.matchCredentials() separately? Oleg --------------------------------------------------------------------- To unsubscribe, e-mail: commons-httpclient-dev-unsubscribe@jakarta.apache.org For additional commands, e-mail: commons-httpclient-dev-help@jakarta.apache.org