[ 
https://issues.apache.org/jira/browse/CXF-4815?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13572747#comment-13572747
 ] 

Christian Schneider commented on CXF-4815:
------------------------------------------

Very nice can I help with it in any way? Would setting the http.maxRedirects to 
another value be a workaround?
                
> Invalid login creds will send many requests to server
> -----------------------------------------------------
>
>                 Key: CXF-4815
>                 URL: https://issues.apache.org/jira/browse/CXF-4815
>             Project: CXF
>          Issue Type: Bug
>          Components: Transports
>    Affects Versions: 2.5.9, 2.6.6, 2.7.3
>            Reporter: Daniel Kulp
>            Assignee: Daniel Kulp
>             Fix For: 2.7.4, 2.6.7, 2.5.10
>
>
> If you set authorizations stuff in the HTTPConduit with a wrong password or 
> username and issue a GET, 20 requests are sent to the server.  For 
> non-streaming connections (like GET), for the 401 response, the 
> HttpURLConnection calls the Authenticator to get auth information.  We create 
> a new PasswordAuthentication object and return it each time.  However, the 
> HttpURLConnection does not compare that returned value with the previous 
> value and will keep trying until it hits the http.maxRedirects value (default 
> is 20).   

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Reply via email to