Matthew Fleming created JBRULES-3667: ---------------------------------------- Summary: UrlResource getLastModified() method does not use authentication Key: JBRULES-3667 URL: https://issues.jboss.org/browse/JBRULES-3667 Project: Drools Issue Type: Bug Security Level: Public (Everyone can see) Components: drools-core Affects Versions: 5.5.0.Beta1, 5.4.0.Final Environment: All environments Reporter: Matthew Fleming Assignee: Mark Proctor Drools supports BASIC authentication when fetching packages via a UrlResource. The implementation is complete for the grabStream() method but is not present for the getLastModified() method. The latter method is used by clients to determine if packages have changed over time. For example, this is use by Guvnor when the KnowledgeAgent (via the ResourceChangeScannerImpl) needs to determine if a remote URL based package has been changed. The defect that happens is swallowed, in that the result of the getLastModified() call returns a zero because of the redirect to whatever authentication is required. So no exception or anything is produced. The client just gets a zero back. The core should be consistent on when it uses authentication and should use it everywhere that URL connections are used. -- This message is automatically generated by JIRA. If you think it was sent incorrectly, please contact your JIRA administrators For more information on JIRA, see: http://www.atlassian.com/software/jira