On Mon, 2015-04-06 at 16:26 +0200, Michael Osipov wrote: > Hi folks, > > I have finally started coding of that issue. While I was able to write a > working prototype within an hour authenticating against Apache Tomcat > and Apache Web Server, an issue arose I am not really clear about: > > Is a credentials provider always necessary for a target host?
Yes, it is. > In other > words, do I always need something like this: > CredentialsProvider p = new BasicCredentialsProvider(); > p.setCredentials(AuthScope.ANY, new > UsernamePasswordCredentials("mumu:mumu")); > builder.setDefaultCredentialsProvider(p); > > Although the credential is by default obtained at runtime? > I have noticed that authentication is not executed if no cred provider > is set and the logs are not very chatty about that. > This whole concept of the auth APIs goes back to the days of HC 2.0 and it remained virtually unchanged in HC 3.x and HC 4.x. The auth APIs were primarily designed to work well with standard auth schemes like BASIC and DIGEST and similar password based auth schemes. Things like Kerberos and native Windows auth were not properly factored it at that point of time. We can think of a better abstraction for HC 5, but for now we will have to live with what we have. Oleg --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@hc.apache.org For additional commands, e-mail: dev-h...@hc.apache.org