[ https://issues.apache.org/jira/browse/HTTPCLIENT-2277?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17725554#comment-17725554 ]
Oleg Kalnichevski edited comment on HTTPCLIENT-2277 at 9/18/23 9:31 AM: ------------------------------------------------------------------------ RFC 9111, section 4.1 * When a cache receives a request that can be satisfied by a stored response and that stored response contains a [Vary|https://httpwg.org/specs/rfc9110.html#field.vary] header field ([Section 12.5.5|https://httpwg.org/specs/rfc9110.html#field.vary] of [??[HTTP]??|https://httpwg.org/specs/rfc9111.html#HTTP]), the cache _MUST NOT_ use that stored response without revalidation unless all the presented request header fields nominated by that Vary field value match those fields in the original request (i.e., the request that caused the cached response to be stored). -Under our existing system architecture, we have yet to implement the Vary header validation as specified in these requirements- Edit: [~arturobernalg] We are actually fine. The variant key is composed of all request field values designated by the Very header. The cache lookup for a variant entry will produce no hit unless all Vary field values fully match. was (Author: arturobernalg): RFC 9111, section 4.1 * When a cache receives a request that can be satisfied by a stored response and that stored response contains a [Vary|https://httpwg.org/specs/rfc9110.html#field.vary] header field ([Section 12.5.5|https://httpwg.org/specs/rfc9110.html#field.vary] of [??[HTTP]??|https://httpwg.org/specs/rfc9111.html#HTTP]), the cache _MUST NOT_ use that stored response without revalidation unless all the presented request header fields nominated by that Vary field value match those fields in the original request (i.e., the request that caused the cached response to be stored). Under our existing system architecture, we have yet to implement the Vary header validation as specified in these requirements > HttpClient Cache conformance to RFC 9111 > ---------------------------------------- > > Key: HTTPCLIENT-2277 > URL: https://issues.apache.org/jira/browse/HTTPCLIENT-2277 > Project: HttpComponents HttpClient > Issue Type: Improvement > Components: HttpCache > Reporter: Oleg Kalnichevski > Priority: Major > Time Spent: 14h > Remaining Estimate: 0h > > Ensure HttpClient Cache conforms to RFC 9111. -- This message was sent by Atlassian Jira (v8.20.10#820010) --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org For additional commands, e-mail: dev-h...@hc.apache.org