[HTTPCLIENT-1140] Infinite loop on basic authentication

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.1.1, 4.1.2
• Fix Version/s: 4.1.3
• Component/s: HttpClient (classic)
• Environment: All
• Assignee: Unassigned
• Reporter: Marcus Bond
• Created: 26/Oct/11 12:53
• Updated: 05/Oct/13 19:41
• Resolved: 26/Oct/11 18:45

Description

Class org.apache.http.impl.client.DefaultRequestDirector has a bug whereby when Authentication fails if the log is not warnEnabled then you will receive a retry request and end up in an infinite loop retrying requests.. This occurred for me when SL4J was being picked up as the implementation but not properly configured.

In 4.1.2 the line number of the offending code is in the handleResponse method, line 1126, the return null statement requires moving outside of the if statement that checkes if the log is warn enabled.