maven-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Benjamin Bentmann (JIRA)" <j...@codehaus.org>
Subject [jira] Commented: (MNG-4147) very long passwords cause LightweightHTTP wagon to line-wrap the Base64-encoded Authorization header
Date Sat, 07 Aug 2010 09:14:32 GMT

    [ http://jira.codehaus.org/browse/MNG-4147?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=231300#action_231300
] 

Benjamin Bentmann commented on MNG-4147:
----------------------------------------

For the record, the HTTP provider was switched back to the Lightweight JRE impl in Maven 2.2.1
so the issue generally remains. However, Maven 2.2.1 provides a way to select/configure the
HTTP provider, allowing users to choose an impl that works for them, see also [Advanced Configuration
of the HttpClient HTTP Wagon|http://maven.apache.org/guides/mini/guide-http-settings.html].

> very long passwords cause LightweightHTTP wagon to line-wrap the Base64-encoded Authorization
header
> ----------------------------------------------------------------------------------------------------
>
>                 Key: MNG-4147
>                 URL: http://jira.codehaus.org/browse/MNG-4147
>             Project: Maven 2 & 3
>          Issue Type: Bug
>          Components: Artifacts and Repositories
>    Affects Versions: 2.1.0
>            Reporter: John Casey
>            Assignee: John Casey
>             Fix For: 2.2.0
>
>
> I'll cross-file (and link) this issue into wagon, but Sun's HTTPURLConnection implementation
uses a line-wrapping Base64 implementation. When passwords are very long, this causes an invalid
HTTP request, since the Authorization header's value is line-wrapped.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://jira.codehaus.org/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Mime
View raw message