spring-projects / spring-projects/spring-framework
Digest Auth support in WebClient
Nobody has claimed this yet.
- Dominant language
- Java
- Stars
- 60.2k
- Forks
- 38.8k
- Avg merge
- 5d 2h
- Merged PRs (30d)
- 27
Description
Spring's WebClient allows specifying Basic Auth credentials quite simply:
webClient.get()
.uri(someEndpoint)
.headers(httpHeaders -> httpHeaders.setBasicAuth(someUserName, somePassword))
...
However, there doesn't seem to be a way to configure the WebClient to perform Digest Auth (RFC 7616).
A lot of servers rely on Digest Auth, and given that WebClient supports the less secure Basic Auth protocol, it would make sense to add support to the client's capabilities. Note that this feature has been requested in other places, for example on StackOverflow.
Thanks for considering this feature request!
Issue originally posted in the Spring Security project (https://github.com/spring-projects/spring-security/issues/7861).
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start with the Spring WebClient authentication APIs and read RFC 7616 to understand the requested Digest Auth behavior. Define how WebClient should configure and perform Digest authentication, then verify that the client supports the requested server interactions and authentication flow.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring
- Domain
- api
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100