[HTTPCLIENT-2141] DefaultHttpRequestRetryStrategy has no timeout on retryafter header

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.0.3
• Fix Version/s: 5.1
• Assignee: Unassigned
• Reporter: Pierre N.
• Created: 15/Mar/21 15:23
• Updated: 28/Mar/21 10:36
• Resolved: 26/Mar/21 07:16

Description

In DefaultHttpRequestRetryStrategy.java:207 value of the HTTP retry header of the failed server is reused as is by HttpRequestRetryExec:143 to sleep the thread.

A server returning a very far retry after header is able to block httpclient request indefinetly by default (and even if proper connect, connection and response timeouts have been set).