RFR: 8270290: NTLM authentication fails if HEAD request is used [v2]

Alex Kasko akasko at openjdk.java.net
Thu Sep 30 08:02:32 UTC 2021


On Wed, 25 Aug 2021 14:21:59 GMT, Alex Kasko <akasko at openjdk.org> wrote:

>> When HEAD request is used with a proxy (or a server) that requires NTLM, authentication fails when server returns large (8kb+) body along with NTLMSSP_CHALLENGE response.
>> 
>> Proposed fix is to check for ongoing NTLM auth in `reset()` and consume the response body in this case.
>> 
>> Alternatively the whole check for `HEAD` method in `reset()` can be dropped.
>
> Alex Kasko has updated the pull request incrementally with one additional commit since the last revision:
> 
>   fix direct server and plain http proxy auth that became inadvertently broken

Pinging politely, the patch was updated to cover only HTTPS proxy tunneling case, NoSuchElementException happens when proxy server is compliant with RFCs, it would be great if someone can review it.

-------------

PR: https://git.openjdk.java.net/jdk/pull/4753


More information about the net-dev mailing list