Skip to content

HTTPCLIENT-2393 - remove rspauth from Authorization#716

Merged
arturobernalg merged 1 commit intoapache:masterfrom
arturobernalg:TTPCLIENT-2393
Sep 14, 2025
Merged

HTTPCLIENT-2393 - remove rspauth from Authorization#716
arturobernalg merged 1 commit intoapache:masterfrom
arturobernalg:TTPCLIENT-2393

Conversation

@arturobernalg
Copy link
Copy Markdown
Member

Fix Digest compliance: stop emitting rspauth in Authorization. Parse/validate rspauth only from Authentication-Info (RFC 7616 §3.5). rollback for ef73836

RFC 7616 compliance: rspauth is server-side (Authentication-Info §3.5) only.
Copy link
Copy Markdown
Member

@garydgregory garydgregory left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM.

@ok2c
Copy link
Copy Markdown
Member

ok2c commented Sep 14, 2025

@arturobernalg What stops you from merging this one?

@arturobernalg arturobernalg merged commit 89da742 into apache:master Sep 14, 2025
10 checks passed
@ok2c
Copy link
Copy Markdown
Member

ok2c commented Sep 14, 2025

@arturobernalg Please also cherry-pick to 5.5.x.

@arturobernalg
Copy link
Copy Markdown
Member Author

@arturobernalg Please also cherry-pick to 5.5.x.
Yes. on it.

arturobernalg added a commit that referenced this pull request Sep 14, 2025
RFC 7616 compliance: rspauth is server-side (Authentication-Info §3.5) only.

(cherry picked from commit 89da742)
@arturobernalg
Copy link
Copy Markdown
Member Author

@arturobernalg Please also cherry-pick to 5.5.x.
Yes. on it.

done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants