From 9368c5f5c830e3c57c8a0e4f2183b4165f0fe056 Mon Sep 17 00:00:00 2001 From: Oleg Kalnichevski Date: Fri, 20 Oct 2017 12:04:26 +0200 Subject: [PATCH] HTTPCLIENT-1855: disabled caching of DIGEST auth scheme instances due to unreliability of nonce counter when the auth cache is shared by multiple sessions --- .../apache/hc/client5/http/impl/auth/HttpAuthenticator.java | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/HttpAuthenticator.java b/httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/HttpAuthenticator.java index 98d2d438e..d2c7807f4 100644 --- a/httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/HttpAuthenticator.java +++ b/httpclient5/src/main/java/org/apache/hc/client5/http/impl/auth/HttpAuthenticator.java @@ -316,8 +316,7 @@ public class HttpAuthenticator { private boolean isCachable(final AuthScheme authScheme) { final String schemeName = authScheme.getName(); - return schemeName.equalsIgnoreCase(AuthSchemes.BASIC) || - schemeName.equalsIgnoreCase(AuthSchemes.DIGEST); + return schemeName.equalsIgnoreCase(AuthSchemes.BASIC); } private void updateCache(final HttpHost host, final AuthScheme authScheme, final HttpClientContext clientContext) {