Apache HttpComponents

Add EventSource with resumable streams, pluggable backoff, and header overrides. Provide CHAR/BYTE parsers, Retry-After integration, and Last-Event-ID support. SseExecutor manages shared/custom clients, schedulers, and callback executors. Ship Read more

Non-ASCII filename corrupted in HTTP request

Hi team, I recently upgraded Apache HTTP Client to newest version (5.5) from 5.3.1 and one of the tests in my client side service detected an issue. Issue is presented while forming HTTP multipart request with attachments/inlines that contains Read more

Add support to run the classic (blocking) HTTP transport on JDK 21 Virtual Threads while preserving the existing public API and error semantics. The feature is disabled by default and can be enabled via builder settings. An additional toggle allows Read more

Authorization header contains rspauth

Commit ddd2d58f38dbf6d198554a9c6a280eeb11b02f17 in httpcomponents-client's branch refs/heads/master from Sanghwa Min [ https://gitbox.apache.org/repos/asf?p=httpcomponents-client.git;h=ddd2d58f3 ] HTTPCLIENT-2388: fix builder default evictor Read more

Thanks for your response ggregory. Our problem is, that the rspauth parameter is supposed to be calculated by the server and returned to the client in the Authentication-Info header. Right now, we’re seeing the opposite: the client is generating rspauth Read more

Hello andyypsilon In https://datatracker.ietf.org/doc/html/rfc7616, I read: The optional response digest in the rspauth parameter supports mutual authentication and For historical reasons, a sender MUST only generate the quoted string Read more

After upgrading to HttpClient 5, one of our services stopped working with Digest Authentication. We traced this to a recent change where the client now includes an rspauth parameter in the Authorization header during the authentication request. https://github.com/apache/httpcomponents-client/pull/594 Read more

After upgrading to HttpClient 5, one of our services stopped working with Digest Authentication. We traced this to a recent change where the client now includes an rspauth parameter in the Authorization header during the authentication request. https://github.com/apache/httpcomponents-client/pull/594 Read more