[QPID-7789] [Java Broker, WMC] The webclient sasl implementation should always answer a challenge by sending back a response.

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: qpid-java-broker-7.0.0
• Component/s: Broker-J
• Assignee: Unassigned
• Reporter: Lorenz Quack
• Created: 18/May/17 12:37
• Updated: 02/Oct/19 19:21
• Resolved: 20/Jul/17 12:25

Description

Currently the client does not always send back a response to a challenge. For example in the SCRAM case when the client receives the server-final message it knows that the negotiation completed but in certain circumstances the broker might need another challenge/response round-trip.

The client should respect the broker's wish and always respond to challenges. The response would be empty if the client thinks the negotiation finished.
In addition it should probably be easier for the client to detect whether a message from the broker is a outcome with additional data or a challenge. Currently the only distinction is that the challenge carries a "id" while the outcome with data does not.

This relates to QPID-7787.