[MRESOLVER-495] Provide AuthenticationSelector based on host/realm instead of repository id

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: Resolver
• Assignee: Unassigned
• Reporter: Konrad Windszus
• Created: 13/Feb/24 07:42
• Updated: 13/Feb/24 09:09

Description

Currently the DefaultAuthenticationSelector only returns authentication info based on the repository id. In order to reuse the same authentication for multiple repositories (on the same or even on different servers) it should be possible to add authentication for a host (and potentially port/realm/scheme).

Apache HttpClient uses the AuthScope class (https://hc.apache.org/httpcomponents-client-4.5.x/current/httpclient/apidocs/org/apache/http/auth/AuthScope.html) to bind credentials to requests.

Compare with https://datatracker.ietf.org/doc/html/rfc7235#section-2.2.

Issue Links

• is related to: MNG-6895 Add aliasing feature for settings.xml:///servers/server
• is related to: MNG-5585 match server credentials based on server realm