George del Busto created CXF-6574:
-------------------------------------

             Summary:  Issue with Digest Authentication
                 Key: CXF-6574
                 URL: https://issues.apache.org/jira/browse/CXF-6574
             Project: CXF
          Issue Type: Bug
          Components: Core
    Affects Versions: 3.1.2
            Reporter: George del Busto
            Priority: Minor


When retrieving a WSDL that is behind  digest authentication.
Part of the digest algorithm uses the URL and expects it to be the full URL 
including any query parameters. 
So when there is a URL like  http://myhost/myservice?wsdl it should be using 
the whole URL, but it  is only using http://myhost/myservice which creates an 
incorrect  digest token and fails the authentication.

 In the DigestAuthSupplier the method generateAuth takes the URL/URI as 
 a parameter. Currently it is called like:
 di.generateAuth(currentURI.getPath(), ...

I'll leave the 'correct' fix up to the experts, but when it's called with 
something like  di.generateAuth(currentURI.getFile(),...
it works because it includes the query parameters as well.

Thank you




--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to