[HTTPCLIENT-175] HttpState cannot differentiate credentials for different hosts with same Realm names

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 2.0 Alpha 3
• Fix Version/s: 2.0 Beta 1
• Component/s: HttpClient (classic)
• Environment: Operating System: other; Platform: Other
• Bugzilla Id: 18355
• Assignee: Adrian Sutton
• Reporter: Chris Brown
• Created: 26/Mar/03 16:43
• Updated: 22/Apr/07 07:10
• Resolved: 22/Apr/07 07:10

Description

It seems that one needs a separate HttpState per client per host: from the
javadocs, if (by coincidence or by design) more than one host uses the same
realm name, such as "Private", then there's an unresolvable conflict, as
HttpState can only store one set of credentials for a given name...

According to Oleg Kalnichevski, it is plausible just to extend the HttpState
class with additional methods that would require host to be specified along the
authentication realm when dealing with credentials.

See postings on "Commons HttpClient Project" mailing list for more info (dated
21/03/2003).