[HTTPCLIENT-1625] Completely overhaul GSS-API-based authentication backend

• Type: Task
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 4.5
• Component/s: Documentation, HttpClient (classic)
• Labels: stuck volunteers-wanted
• Assignee: Unassigned
• Reporter: Michael Osipov
• Created: 01/Mar/15 20:35
• Updated: 15/Apr/24 07:22
• Resolved: 30/Dec/23 08:57

Description

The current implementation does not reflect the way GSS-API-based authentication should be done. It has several design flaws.

This is an umbrella task for:

1. Deprecate all old classes
2. Investigate how it has to be plugged into HttpClient
3. Reimplement from scratch
4. Thoroughly test all new stuff
5. Rewrite documentation

Design notes are canonically available under: https://wiki.apache.org/HttpComponents/IssueTracking/HTTPCLIENT-1625

Issue Links

• is depended upon by: WAGON-522 Kerberos support doesn't work
• is depended upon by: HTTPCLIENT-1938 OS resources leak in HttpAuthenticator/WindowsNegotiateScheme
• is related to: CALCITE-6364 HttpClient SPENGO support is deprecated
• is related to: HTTPCLIENT-1972 Kerberos/SPNego Negotiate not working correctly?
• is required by: CONNECTORS-1103 Add Kerberos support for all connectors that currently use NTLM
• relates to: WAGON-453 java.net.useSystemProxies don't work with wagon-http-lightweight
• supercedes: HTTPCLIENT-1569 GGSSchemeBase incorrectly spelled
• supercedes: HTTPCLIENT-1570 GGSSchemeBase blindly assumes that SPNEGO is always used