[ 
https://issues.apache.org/jira/browse/VFS-858?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Boris Petrov updated VFS-858:
-----------------------------
    Description: 
Congrats on the new release!

[This 
line|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L236]
 gets the password from the *UserAuthenticationData* directly, without copying, 
and saves it in an array. The method is called from 
[here|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L341].
 Then, a [few lines 
down|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L344],
 the authentication data is nulled which also cleans it in the 
credentials-provider that was passed to the http-client. And then the requests 
don't work.

P.S. Actually, I can't seem to be able to use authentication with the HTTP4 
provider either where *String* is used for the password so I guess there is 
another problem. I'm only able to use that with the oldest HTTP provider.

  was:
Congrats on the new release!

[This 
line|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L236]
 gets the password from the *UserAuthenticationData* directly, without copying, 
and saves it in an array. The method is called from 
[here|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L341].
 Then, a [few lines 
down|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L344],
 the authentication data is nulled which also cleans it in the 
credentials-provider that was passed to the http-client. And then the requests 
don't work.


> Cannot use authentication with the HTTP5 provider
> -------------------------------------------------
>
>                 Key: VFS-858
>                 URL: https://issues.apache.org/jira/browse/VFS-858
>             Project: Commons VFS
>          Issue Type: Bug
>    Affects Versions: 2.10.0
>            Reporter: Boris Petrov
>            Priority: Critical
>
> Congrats on the new release!
> [This 
> line|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L236]
>  gets the password from the *UserAuthenticationData* directly, without 
> copying, and saves it in an array. The method is called from 
> [here|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L341].
>  Then, a [few lines 
> down|https://github.com/apache/commons-vfs/blob/rel/commons-vfs-2.10.0/commons-vfs2/src/main/java/org/apache/commons/vfs2/provider/http5/Http5FileProvider.java#L344],
>  the authentication data is nulled which also cleans it in the 
> credentials-provider that was passed to the http-client. And then the 
> requests don't work.
> P.S. Actually, I can't seem to be able to use authentication with the HTTP4 
> provider either where *String* is used for the password so I guess there is 
> another problem. I'm only able to use that with the oldest HTTP provider.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to