On Tue, 10 Jun 2025 15:09:33 GMT, Daniel Fuchs <dfu...@openjdk.org> wrote:

>> p-nima has updated the pull request incrementally with one additional commit 
>> since the last revision:
>> 
>>   apply review feedback and improve readability
>
> test/jdk/java/net/httpclient/HttpClientAuthRetryLimitTest.java line 136:
> 
>> 134:                 } else {
>> 135:                     assertEquals(0, totalRequestCount - 1);
>> 136:                 }
> 
> Ok - so now we're getting somewhere. This lets me think that the change in 
> the AuthenticationFilter is not right. The specification says:
> 
>> jdk.httpclient.auth.retrylimit (default: 3)
>> The number of attempts the Basic authentication filter will attempt to retry 
>> a failed authentication. 
> 
> When I read this, I expect that if the limit is 0, no retries, then the 
> Authenticator will be called once, and if the authentication fails with these 
> credentials, then the request will fail.
> If the limit is 1, then we will retry once, which means the Authenticator 
> should be called twice, and so on.
> 
> So maybe we should always assert that totalRequestCount == 
> `Math.max(RETRY_LIMIT, 0) + 1`?

@Michael-Mc-Mahon Is my interpretation above correct?

-------------

PR Review Comment: https://git.openjdk.org/jdk/pull/25490#discussion_r2138162592

Reply via email to