Christoph E. created CXF-6236:
---------------------------------

             Summary: proxyAuthSupplier not used in 
HTTPConduit.setHeadersByAuthorizationPolicy
                 Key: CXF-6236
                 URL: https://issues.apache.org/jira/browse/CXF-6236
             Project: CXF
          Issue Type: Bug
          Components: Transports
    Affects Versions: 3.0.3, 2.6.6
            Reporter: Christoph E.


i'm trying to send requests to an external system which requires basic auth via 
an internal http proxy which uses digest auth

{code:xml}
<http-conf:conduit name="*.http-conduit">
        <http-conf:client
                ProxyServer="proxy"
                ProxyServerPort="3128"
        />
        <http-conf:authorization>
                <http-sec:UserName>xxx</http-sec:UserName>
                <http-sec:Password>xxx</http-sec:Password>
                <http-sec:AuthorizationType>Basic</http-sec:AuthorizationType>
        </http-conf:authorization>
        <http-conf:proxyAuthorization>
                <http-sec:UserName>proxyuser</http-sec:UserName>
                <http-sec:Password>proxypass</http-sec:Password>
                <http-sec:AuthorizationType>Digest</http-sec:AuthorizationType>
        </http-conf:proxyAuthorization>
</http-conf:conduit>
{code}

the problem is that Proxy-Authentication is always using basic auth

i think i found the problem in
org.apache.cxf.transport.http.HTTPConduit.setHeadersByAuthorizationPolicy
{code}
        String proxyAuthString = 
*authSupplier*.getAuthorization(proxyAuthorizationPolicy, 
                                                               url, message, 
null);
        if (proxyAuthString != null) {
            headers.setProxyAuthorization(proxyAuthString);
        }
{code}

the field proxyAuthSupplier was lazy initialized as DigestAuthSupplier in 
prepare method, but it is not used to create the header.



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to