[HTTPCLIENT-1649] Caching of proxy auth schemes is broken

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 4.4.1
• Fix Version/s: 4.5
• Component/s: HttpClient (classic)
• Environment: HttpClient v4.3.3 and v4.4.1, Linux Mint 17 (x86_64), Java 7 (Oracle, 1.7.0_51)
• Assignee: Unassigned
• Reporter: Hartmut Arlt
• Created: 21/May/15 10:19
• Updated: 04/May/17 09:49
• Resolved: 22/May/15 07:26

Description

The implementation of the authentication cache has changed in HttpClient v4.4.1 by using object serialization and de-serialization to store and retrieve the authentication schemes for a given host instead of using object references as was done in v4.3.3.

When using basic authentication for a proxy this mechanism does not work reliably, causing subsequent requests to use the wrong authentication header (Authorization vs Proxy-Authorization).

Issue Links

• is duplicated by: HTTPCLIENT-1652 AuthSchemeBase.challengeState doesn't survive serialisation in BasicAuthCache
• is related to: CXF-6704 Upgrade to httpclient 4.5.x