Applet socket connections accept invalid password

Name: yyT116575 Date: 12/04/2000


Java(TM) Plug-in: Version 1.3.0-C
Using JRE version 1.2.2 Classic VM

When an applet (using Java Plugin) creates an http socket connection to an URL
that requires a user name and password (standard HTTP reply of 401 Authorization
required) and the Socket is allowed to interactively ask for credentials, the
prompt is provided once. However, if the user accidentally enters an invalid
user name / password combination, the socket connection fails and so do all
subsequent attempts. The prompt is not displayed again until the plugin (and
browser) is shut down and restarted. The plugin should
a) allow the user to retry the password until it is accepted, or
b) return an exception to the applet, but redisplay the prompt on the next
attempt and not cache the invalid credentials and automatically reuse them.
(Review ID: 113231)
======================================================================