[ 
https://issues.apache.org/jira/browse/CXF-4815?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Daniel Kulp resolved CXF-4815.
------------------------------

    Resolution: Fixed
      Assignee: Christian Schneider  (was: Daniel Kulp)
    
> Invalid login creds will send many requests to server
> -----------------------------------------------------
>
>                 Key: CXF-4815
>                 URL: https://issues.apache.org/jira/browse/CXF-4815
>             Project: CXF
>          Issue Type: Bug
>          Components: Transports
>    Affects Versions: 2.5.9, 2.6.6, 2.7.3
>            Reporter: Daniel Kulp
>            Assignee: Christian Schneider
>             Fix For: 2.7.4, 2.6.7, 2.5.10
>
>
> If you set authorizations stuff in the HTTPConduit with a wrong password or 
> username and issue a GET, 20 requests are sent to the server.  For 
> non-streaming connections (like GET), for the 401 response, the 
> HttpURLConnection calls the Authenticator to get auth information.  We create 
> a new PasswordAuthentication object and return it each time.  However, the 
> HttpURLConnection does not compare that returned value with the previous 
> value and will keep trying until it hits the http.maxRedirects value (default 
> is 20).   

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to