[CXF-6007] WebClient does not resend request in Digest authentication for HTTP methods GET, HEAD, DELETE, OPTIONS (with no body).

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 3.0, 3.0.1
• Fix Version/s: 3.1, 2.7.16, 3.0.5
• Component/s: JAX-RS, Transports

Environment

Windows 7, jdk1.7.0_65, cxf-rt-transports-http: 3.0.x

• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: Dmitriy Fedoriv
• Created: 17/Sep/14 11:29
• Updated: 14/Oct/16 14:24
• Resolved: 30/Apr/15 16:04

Description

Hi guys,

I try to send DELETE, GET (auto-redirect disabled), HEAD, OPTIONS or any other HTTP requests with no body used digest authentication to RESTful service. In this case I always get "first" HTTP response with status code 401 - Unathorized but client does not resend "answer" with "WWW-Authenticate" header.

I had the assumption that the problem arises due to incorrect cache settings in methods:
1) HTTPConduit.WrappedOutputStream.handleHeadersTrustCaching()
and
2) HTTPConduit.WrappedOutputStream.handleRetransmits()).
in package org.apache.cxf.transport.http.

Is there any way to be properly authorized by the service (digest mode) in these cases?

In my application I use, depending on the following versions of products:

• javax.ws.rs-api: 2.0
• javax.annotation-api: 1.2
• cxf-core: 3.0.1
• cxf-rt-rs-client: 3.0.1
• cxf-rt-frontend-jaxrs: 3.0.1
• cxf-rt-transports-http: 3.0.1
• cxf-rt-transports-http-hc: 3.0.1
• httpasyncclient: 4.0.1
• httpclient: 4.3.2
• httpcore: 4.3.2
• httpcore-nio:4.3.2

I look forward to your assistance. Thank you.