[MNG-5585] match server credentials based on server realm

**[nicolas de loof](https://issues.apache.org/jira/secure/ViewProfile.jspa?name=ndeloof)** opened **[MNG-5585](https://issues.apache.org/jira/browse/MNG-5585?redirect=false)** and commented

credentials for repositories are identified based on arbitrary ID. This is error prone and fragile design, especially as there's no way to diagnose which credentials are used (see MNG-5584).

A realm-based server matching would better follow the way HTTP security is defined, and could be easily used for other protocols based (for sample) on domain name.

```xml

xxx
[optional protocol://]repo.acme.com
..

```

---

**Affects:** 4.x / Backlog

**Issue Links:**
- [MNG-8380](https://issues.apache.org/jira/browse/MNG-8380) Allow Repositories and Mirrors To Delegate Credentials To A \
(_**"is duplicated by"**_)
- [MNG-6895](https://issues.apache.org/jira/browse/MNG-6895) Add aliasing feature for settings.xml:///servers/server

- [MRESOLVER-495](https://issues.apache.org/jira/browse/MRESOLVER-495) Provide AuthenticationSelector based on host/realm instead of repository id

- [WAGON-558](https://issues.apache.org/jira/browse/WAGON-558) log credentials source when failing to access a repository

3 votes, 7 watchers