Uploaded image for project: 'HttpComponents HttpClient'
  1. HttpComponents HttpClient
  2. HTTPCLIENT-1962

WindowsNegotiateScheme incorrectly requires challenge in initial response

    XMLWordPrintableJSON

    Details

      Description

      'WindowsNegotiateScheme.processChallenge' requires the value of an AuthChallenge to be present on any invocation, as it requires the GSSAPI-Data to perform the authentication process.

      But the "WWW-Authenticate"-header of the initial "401 Unauthorized" response does not contain any GSSAPI-Data (see RFC4559, Section 4.1, first paragraph).

      'WindowsNegotiateScheme.generateAuthResponse' correctly handles the initial case, as it does not require any challenge to be present.

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              Volker Jung Volker Jung
            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated: