RFR: 8275534: com.sun.net.httpserver.BasicAuthenticator should check whether "realm" is a quoted string

[Michael McMahon]

On Fri, 29 Oct 2021 10:28:39 GMT, Michael McMahon <michaelm at openjdk.org> wrote:

>> OK - but then I'd still say: `The value of the {@code realm} parameter will be embedded in a quoted string.`
>> Otherwise the caller might think they need to provide a quoted string such as: "\\"realm\\"" which would end up as realm=""realm"" over the wire, with double double quotes.
>
> Or how about this?
> 
>  * @throws IllegalArgumentException if realm is an empty string or is not correctly
>  *         quoted, as specified in <a href="https://tools.ietf.org/html/rfc7230#section-3.2">
>  *         RFC 7230 section-3.2</a>. Note, any {@code } character used for quoting must itself
>  *         also be quoted in source code.
> 
> Would need to check the correct way to display a \ char. It possibly needs to be {@code \} for the same reason.

I agree with adding this as well. "The value of the {@code realm} parameter will be embedded in a quoted string"

-------------

PR: https://git.openjdk.java.net/jdk/pull/6117