Uploaded image for project: 'HttpComponents HttpClient'
  1. HttpComponents HttpClient
  2. HTTPCLIENT-1962

WindowsNegotiateScheme incorrectly requires challenge in initial response

    XMLWordPrintableJSON

Details

    Description

      'WindowsNegotiateScheme.processChallenge' requires the value of an AuthChallenge to be present on any invocation, as it requires the GSSAPI-Data to perform the authentication process.

      But the "WWW-Authenticate"-header of the initial "401 Unauthorized" response does not contain any GSSAPI-Data (see RFC4559, Section 4.1, first paragraph).

      'WindowsNegotiateScheme.generateAuthResponse' correctly handles the initial case, as it does not require any challenge to be present.

      Attachments

        Activity

          People

            Unassigned Unassigned
            Volker Jung Volker Jung
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated: