[CXF-6551] Digest authentication to intermediate HTTP proxy fails with 407 without retry

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.7.6, 2.7.8, 2.7.14, 3.1
• Fix Version/s: 3.1.3, 2.7.18, 3.0.7
• Estimated Complexity: Unknown
• Assignee: Sergey Beryozkin
• Reporter: James Richard
• Created: 19/Aug/15 16:27
• Updated: 14/Oct/16 14:12
• Resolved: 03/Sep/15 13:47

Description

When attempting to connect to a server through an HTTP proxy that requires Digest authentication, the proxy sends back a 407 error. The client should then use the information sent back along with the 407 to create the correct Digest Header and try the request again but it doesn't.

Instead the HTTPConduit attempts one request and then goes into the handleResponseInternal() method where it checks the response code

 if (responseCode >= 400 && responseCode != 500 && !noExceptions) 

and throws an HTTPException instead of finishing the Digest transaction.

In the processRetransmit() method it check for a 401 error and then attempts the authorizationRetransmit() BUT it does not handle the 407 error.