hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 33432] - setAuthPreemptive restricted to BASIC AuthScheme
Date Tue, 08 Feb 2005 17:05:02 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=33432>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=33432





------- Additional Comments From olegk@apache.org  2005-02-08 18:05 -------
> I don't understand why this is considered deprecated behavior.

My understanding is that "expect-continue" handshake was designed primarily to
render the preemptive authentication superfluous. I admin I may err in my
assumption, though.

> I will see what I can come up with.

In my opinion the authentication framework was the most complex piece of logic I
have ever written for HttpClient. I took me almost half a year to get it working
with all possible combination of authentication schemes (Basic vs Digest vs
NTLM) / host authentication and(or) proxy authentication / HTTPS tunnelling vs
direct HTTP / connection 'keep-alive' vs connection 'close') /
CredentialsProvider vs HttpState / preemptive vs 'expect-continue'. 

The challenge is not to get it working with Kerberos but rather to ensure that
the framework still works properly in all possible combinations mentioned above. 

Luckily we now have a fairly decent test case coverage, but there's no easy way
to unit-test the NTLM authentication (which is by far the most complex), so I am
a little reluctant to see changes of such magnitude so late in the release process.

Anyways, a well written, thoroughly tested patch will never be turned down

Oleg

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-dev-help@jakarta.apache.org


Mime
View raw message