Re: Proxy-Authorization forwarded, as of jigsaw 2.2.2

On Thu, 20 Feb 2003, Thomas Kriegelstein wrote:

>
>
> Hi,
>
> org/w3c/jigsaw/proxy/ForwardFrame.java (jigsaw 2.2.2) Line 246 sets the
> Proxy-Authenticate header to null. This header is not supposed to be send by a
> client or upstream-proxy. This is not the bug but a copy & paste mistake from
> dupReply.
>
> The bug is:
> According to RFC 2616 section 13.5.1:
> The Proxy-Authorization header is also a hop-by-hop header. So it should be
> set to null.
> Recommended fix: Replace the H_PROXY_AUTHENTICATE in line 246 with
> H_PROXY_AUTHORIZATION.

14:34 Proxy Authorization

A proxy MAY relay the credentials from the client request to the next
proxy if that is the mechanism by which the proxies cooperatively
authenticate a given request.

So it is hop-by-hop but may be relayed :)
But in this case it was indeed a typo ;) thanks for noticing this!
(it is fixed in CVS [1] and will be in the upcoming so-called "devel" jar)
Thanks!

[1] http://dev.w3.org/cvsweb/java/classes/org/w3c/

-- 
Yves Lafon - W3C
"Baroula que barouleras, au tiéu toujou t'entourneras."

Received on Monday, 24 February 2003 06:08:26 UTC