This is an automated email from the ASF dual-hosted git repository.

gnodet pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-resolver.git

commit 3785bf51153b74cf685d800f543a625086ff8d6d
Author: Guillaume Nodet <[email protected]>
AuthorDate: Sun Jun 7 06:36:14 2026 +0000

    Fix DeferredCredentialsProvider — extend synchronized block
    
    F-11: Move delegate.getCredentials() inside the synchronized(factories)
    block to prevent concurrent read/write on the underlying HashMap-backed
    BasicCredentialsProvider.
---
 .../eclipse/aether/transport/apache/DeferredCredentialsProvider.java    | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git 
a/maven-resolver-transport-apache/src/main/java/org/eclipse/aether/transport/apache/DeferredCredentialsProvider.java
 
b/maven-resolver-transport-apache/src/main/java/org/eclipse/aether/transport/apache/DeferredCredentialsProvider.java
index fd32f1dd7..393d3fb6c 100644
--- 
a/maven-resolver-transport-apache/src/main/java/org/eclipse/aether/transport/apache/DeferredCredentialsProvider.java
+++ 
b/maven-resolver-transport-apache/src/main/java/org/eclipse/aether/transport/apache/DeferredCredentialsProvider.java
@@ -67,8 +67,8 @@ final class DeferredCredentialsProvider implements 
CredentialsProvider {
                     delegate.setCredentials(entry.getKey(), 
entry.getValue().newCredentials());
                 }
             }
+            return delegate.getCredentials(authScope);
         }
-        return delegate.getCredentials(authScope);
     }
 
     @Override

Reply via email to