[jdk17u-dev] RFR: 8292876: Do not include the deprecated userinfo component of the URI in HTTP/2 headers [v2]

[Goetz Lindenmaier]

On Sun, 3 Aug 2025 20:42:14 GMT, Goetz Lindenmaier <goetz at openjdk.org> wrote:

>> I would like to fix this issue along with the large http2 remake of 17.
>> Clean backport, but needed to add edits of  8295944: Move the Http2TestServer and related classes into a package of its own
>> that was already backported.
>
> Goetz Lindenmaier has updated the pull request incrementally with one additional commit since the last revision:
> 
>   run test as othervm

Like I saw with https://github.com/openjdk/jdk17u-dev/pull/3783, I get an exception in our nightly tests, while the test works fine stand alone. 
Adding /othervm helps, see latest push.

STARTED    UserInfoTest::testAuthorityHeader 'testAuthorityHeader()'
java.lang.SecurityException: access denied ("java.net.URLPermission" "https://user@127.0.0.1:46987" "GET:")
	at java.net.http/jdk.internal.net.http.HttpClientImpl.send(HttpClientImpl.java:892)
	at java.net.http/jdk.internal.net.http.HttpClientFacade.send(HttpClientFacade.java:133)
	at UserInfoTest.testAuthorityHeader(UserInfoTest.java:112)
	at java.base/java.lang.reflect.Method.invoke(Method.java:569)
	at java.base/java.util.ArrayList.forEach(ArrayList.java:1511)
	at java.base/java.util.ArrayList.forEach(ArrayList.java:1511)
Caused by: java.security.AccessControlException: access denied ("java.net.URLPermission" "https://user@127.0.0.1:46987" "GET:")
	at java.base/java.security.AccessControlContext.checkPermission(AccessControlContext.java:485)
	at java.base/java.lang.SecurityManager.checkPermission(SecurityManager.java:453)
	at java.net.http/jdk.internal.net.http.Exchange.checkPermissions(Exchange.java:757)
	at java.net.http/jdk.internal.net.http.Exchange.responseAsyncImpl(Exchange.java:407)
	at java.net.http/jdk.internal.net.http.Exchange.responseAsync(Exchange.java:403)
	at java.net.http/jdk.internal.net.http.MultiExchange.responseAsyncImpl(MultiExchange.java:430)
	at java.net.http/jdk.internal.net.http.MultiExchange.lambda$responseAsync0$2(MultiExchange.java:350)
	at java.base/java.util.concurrent.CompletableFuture$UniCompose.tryFire(CompletableFuture.java:1150)
	at java.base/java.util.concurrent.CompletableFuture.postComplete(CompletableFuture.java:510)
	at java.base/java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1773)
	at java.net.http/jdk.internal.net.http.HttpClientImpl$DelegatingExecutor.execute(HttpClientImpl.java:174)
	at java.base/java.util.concurrent.CompletableFuture.completeAsync(CompletableFuture.java:2673)
	at java.net.http/jdk.internal.net.http.MultiExchange.responseAsync(MultiExchange.java:303)
	at java.net.http/jdk.internal.net.http.HttpClientImpl.sendAsync(HttpClientImpl.java:991)
	at java.net.http/jdk.internal.net.http.HttpClientImpl.send(HttpClientImpl.java:878)

-------------

PR Comment: https://git.openjdk.org/jdk17u-dev/pull/3794#issuecomment-3148687010