[jboss-jira] [JBoss JIRA] (JBRULES-3667) UrlResource getLastModified() method does not use authentication

[Matthew Fleming (JIRA)]

Matthew Fleming created JBRULES-3667:
----------------------------------------

             Summary: UrlResource getLastModified() method does not use authentication
                 Key: JBRULES-3667
                 URL: https://issues.jboss.org/browse/JBRULES-3667
             Project: Drools
          Issue Type: Bug
      Security Level: Public (Everyone can see)
          Components: drools-core
    Affects Versions: 5.5.0.Beta1, 5.4.0.Final
         Environment: All environments
            Reporter: Matthew Fleming
            Assignee: Mark Proctor


Drools supports BASIC authentication when fetching packages via a UrlResource. The implementation is complete for the grabStream() method but is not present for the getLastModified() method.

The latter method is used by clients to determine if packages have changed over time. For example, this is use by Guvnor when the KnowledgeAgent (via the ResourceChangeScannerImpl) needs to determine if a remote URL based package has been changed.

The defect that happens is swallowed, in that the result of the getLastModified() call returns a zero because of the redirect to whatever authentication is required. So no exception or anything is produced. The client just gets a zero back.

The core should be consistent on when it uses authentication and should use it everywhere that URL connections are used.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira