Skip to content

Do not treat a 407 received through a tunnel as a proxy challenge - #917

Merged
arturobernalg merged 1 commit into
apache:masterfrom
arturobernalg:tunnel-407-not-proxy-challenge
Nov 1, 2026
Merged

arturobernalg merged 1 commit into
apache:masterfrom
arturobernalg:tunnel-407-not-proxy-challenge

Conversation

@arturobernalg

Copy link
Copy Markdown
Member

Once the CONNECT tunnel is established a 407 comes from the origin, not from the proxy. It was evaluated against the proxy auth exchange and failed with NullPointerException (AuthCacheKeeper#updateCache) or IllegalStateException (AuthenticationHandler). The response is now returned to the caller as is, in ProtocolExec and AsyncProtocolExec.

Tests added.

@arturobernalg
arturobernalg requested a review from ok2c November 1, 2026 09:17
Once the CONNECT tunnel is established a 407 comes from the origin. It
was evaluated against the proxy auth exchange, which failed with a
NullPointerException or IllegalStateException. The response is now
returned to the caller as is.
@arturobernalg
arturobernalg force-pushed the tunnel-407-not-proxy-challenge branch from 7e79e7e to b515e35 Compare November 1, 2026 10:00
@arturobernalg
arturobernalg merged commit f805a8c into apache:master Nov 1, 2026
10 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants