[MESOS-9968] WWWAuthenticate header parsing fails when commas are in (quoted) realm

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.7.3, 1.8.2, 1.9.1, 1.10.0
• Component/s: HTTP API, libprocess
• Sprint: Foundations: RI-18 55, Foundations: RI-19 56
• Story Points: 1
• Assignee: Benjamin Bannier
• Reporter: Jan Schlicht
• Shepherd: Benno Evers
• Created: 17/Sep/19 08:01
• Updated: 26/Feb/20 17:55
• Resolved: 30/Sep/19 12:54

Description

This was discovered when trying to launch the nvcr.io/nvidia/tensorflow:19.08-py3 image using the Mesos containerizer. This launch fails with

Failed to launch container: Failed to get WWW-Authenticate header: Unexpected auth-param format: 'realm="https://nvcr.io/proxy_auth?scope=repository:nvidia/tensorflow:pull' in 'realm="https://nvcr.io/proxy_auth?scope=repository:nvidia/tensorflow:pull,push"'

This is because the header tokenization in libprocess can't handle commas in quoted realm values.