Re: Proxy-Authorization forwarded, as of jigsaw 2.2.2

Yves Lafon <[email protected]> Mon, 24 Feb 2003 12:08:24 +0100 (MET)
Newsgroups gmane.comp.web.jigsaw
Message-ID <[email protected]>
On Thu, 20 Feb 2003, Thomas Kriegelstein wrote:

>
>
> Hi,
>
> org/w3c/jigsaw/proxy/ForwardFrame.java (jigsaw 2.2.2) Line 246 sets the
> Proxy-Authenticate header to null. This header is not supposed to be se=
nd by a
> client or upstream-proxy. This is not the bug but a copy & paste mistak=
e from
> dupReply.
>
> The bug is:
> According to RFC 2616 section 13.5.1:
> The Proxy-Authorization header is also a hop-by-hop header. So it shoul=
d be
> set to null.
> Recommended fix: Replace the H_PROXY_AUTHENTICATE in line 246 with
> H_PROXY_AUTHORIZATION.

14:34 Proxy Authorization

A proxy MAY relay the credentials from the client request to the next
proxy if that is the mechanism by which the proxies cooperatively
authenticate a given request.

So it is hop-by-hop but may be relayed :)
But in this case it was indeed a typo ;) thanks for noticing this!
(it is fixed in CVS [1] and will be in the upcoming so-called "devel" jar=
)
Thanks!

[1] http://dev.w3.org/cvsweb/java/classes/org/w3c/

--=20
Yves Lafon - W3C
"Baroula que barouleras, au ti=E9u toujou t'entourneras."