>This test shows that basic authenticaiton uses the default creds (the creds
with
>the null realm in the httpstate). I'm not sure what your patch is trying
to fix
>... can you supply a test case that fails with the current code, but passes
>after your patch is applied?
I could have sworn that ex
There is a test case in TestAuthenticator.java:
public void testBasicAuthenticationWithDefaultCreds() throws Exception {
HttpState state = new HttpState();
state.setCredentials(null,new
UsernamePasswordCredentials("username","password"));
HttpMethod method = new Simple
Digest authentication falls back to the default credentials
(state.getCredentials(null)) when credentials for the specific realm aren't
found, however basic authentication doesn't currently do that. This patch
makes basic authentication behave like digest authentication.
There is the security is