From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Alain Picard Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 21 Sep 2016 05:47:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: report 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: 24490@debbugs.gnu.org Cc: Alain Picard X-Debbugs-Original-To: bug-gnu-emacs@gnu.org Received: via spool by submit@debbugs.gnu.org id=B.14744367835530 (code B ref -1); Wed, 21 Sep 2016 05:47:01 +0000 Received: (at submit) by debbugs.gnu.org; 21 Sep 2016 05:46:23 +0000 Received: from localhost ([127.0.0.1]:58695 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmaMP-0001R7-67 for submit@debbugs.gnu.org; Wed, 21 Sep 2016 01:46:23 -0400 Received: from eggs.gnu.org ([208.118.235.92]:56578) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmZ0u-0007WN-Cl for submit@debbugs.gnu.org; Wed, 21 Sep 2016 00:20:06 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bmZ0k-0000fN-24 for submit@debbugs.gnu.org; Wed, 21 Sep 2016 00:19:59 -0400 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on eggs.gnu.org X-Spam-Level: X-Spam-Status: No, score=0.8 required=5.0 tests=BAYES_50,HTML_MESSAGE, T_DKIM_INVALID,WEIRD_PORT autolearn=disabled version=3.3.2 Received: from lists.gnu.org ([2001:4830:134:3::11]:56131) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmZ0j-0000fB-UB for submit@debbugs.gnu.org; Wed, 21 Sep 2016 00:19:53 -0400 Received: from eggs.gnu.org ([2001:4830:134:3::10]:47480) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmZ0d-0001lg-A8 for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 00:19:52 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1bmZ0X-0000c3-Et for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 00:19:47 -0400 Received: from mail-yb0-x232.google.com ([2607:f8b0:4002:c09::232]:36677) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1bmZ0W-0000Sh-Qr for bug-gnu-emacs@gnu.org; Wed, 21 Sep 2016 00:19:41 -0400 Received: by mail-yb0-x232.google.com with SMTP id u125so20310467ybg.3 for ; Tue, 20 Sep 2016 21:19:19 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gocatch-com.20150623.gappssmtp.com; s=20150623; h=mime-version:from:date:message-id:subject:to:cc; bh=/kkJVCJmvOUqOdr+77+uH6QR0c7PzbNAnhAXzTiC0TA=; b=wxQDtCG30wAJRyjRMq0Sc007MX4z1eo4C469MiPdlzXTe7ukMpY39wff23QznKL1d1 FXg0/6YihTGMBjHiotXw1CFfxzQBumn9ytaRT5WXBMxGQmN982p/tJzXVt0m5eSOeXyT 2fnfttE/3Ueh5e79vhKXdObgcZD3z4o1Y7BAYhsTXGlqhtqxxJrTNnQmJ8Yg8XWx3xnz cDwqfLpe5OIo1N9N7LtDLRSjtTc0p6GW5qNFSBpNIh4RLFuz/OZaiAJjmdz72XHKMaYs ipLL3rwTy+e+sDCnU+cuLtiXH1TohqiYKg9/8yTVV9RwUThGK0EbdpLaZLOjcv/IFnEU m/fw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:from:date:message-id:subject:to:cc; bh=/kkJVCJmvOUqOdr+77+uH6QR0c7PzbNAnhAXzTiC0TA=; b=jSZB0rqTjTkS/6xAoO133gMLn/Dx8ndOt0G+X2ItR0GaoJAO+TFJQJOJ/Jof3pDGfK A88iRxab4vjz/7KwQFBQAA/Pqqt61osakFAdm2HZJmks1v8K8ksU2gui4spLfF0I/rLU U51VEvccG7mbNnzHdYhhDg3Cz1HhwvIJPJJaItXzy5iBK43+FPhxUkvZbiHPnk//N/0y pL+TfvACv81TTp/OIbiI+cs/W8i9pHi3I+Y2vcvLCouZE0RfjyrSLKvYhXQAkDR1Xd+7 pWCvt4cTypgtWxpV3LFz3Z6A19wcnr5L2uEKskltHCJZgim+tb/1syrVCGId9pgkcGa2 hVuQ== X-Gm-Message-State: AE9vXwNDt693PYzUu/X+MTg4kwVknzsiPHV3dZ185+TMHYxUGKuNZRqvqK5uDNT0OhsljNTqQu/ALv10E4QTCRBO4HuG2gwyr7DcVyvoNwkZZTgizVaiGwQKBAigc7+AeMnSwoEe8RzBCwoS+uQ= X-Received: by 10.37.170.35 with SMTP id s32mr32401390ybi.23.1474431558738; Tue, 20 Sep 2016 21:19:18 -0700 (PDT) MIME-Version: 1.0 Received: by 10.103.122.150 with HTTP; Tue, 20 Sep 2016 21:19:18 -0700 (PDT) From: Alain Picard Date: Wed, 21 Sep 2016 14:19:18 +1000 Message-ID: Content-Type: multipart/alternative; boundary=94eb2c0b73da4e17b4053cfcd9cd X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.2.x-3.x [generic] X-detected-operating-system: by eggs.gnu.org: GNU/Linux 2.6.x X-Received-From: 2001:4830:134:3::11 X-Spam-Score: -4.4 (----) X-Mailman-Approved-At: Wed, 21 Sep 2016 01:46:19 -0400 X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -4.4 (----) --94eb2c0b73da4e17b4053cfcd9cd Content-Type: text/plain; charset=UTF-8 Dear Maintainers, In emacs 25.1, the code in url-http.el, line 638, states: ;; Do not automatically include an authorization header in the ;; redirect. If needed it will be regenerated by the relevant ;; auth scheme when the new request happens. (setq url-http-extra-headers (cl-remove "Authorization" url-http-extra-headers :key 'car :test 'equal)) I suspect this automatic regenration does not occur. Problem: I am using restclient.el, and hitting a server which issues a redirect, and I receive a 400 Forbidden response because the redirected call does not receive the authentication header (I can see this from the log of my server). Here is a subset of my test http file in restclient mode: ------------------ :host = http://localhost:4348 :driver-2 = goCatch 9999 # GET :host/api/v2/jobs X-Gocatch-State: {"available" : true, "lat": -33.1, "lng":150.9, "speed":15, "error":5, "direction":310 } Authorization: :driver-2 ------------------ In emacs 24, this used to return: [lots of text here snipped] // GET http://localhost:4348/api/v2/jobs // HTTP/1.1 200 OK // Content-Type: application/json; charset=utf-8 // Cache-Control: max-age=0 // Content-Length: 1222 // Server: http-kit // Date: Wed, 21 Sep 2016 04:13:46 GMT // Request duration: 0.247260s But in emacs 25 it now returns: No or invalid authentication details are provided // GET http://localhost:4348/api/v2/jobs // HTTP/1.1 401 Unauthorized // Cache-Control: max-age=0 // Content-Length: 49 // Server: http-kit // Date: Wed, 21 Sep 2016 04:14:29 GMT // Request duration: 0.131224s If I comment out the 3 lines starting at line 642: (setq url-http-extra-headers (cl-remove "Authorization" url-http-extra-headers :key 'car :test 'equal)) I get back the original, correct behaviour. Thanks in advance, and thanks for all the great work on emacs... I've been appreciating your hard work (and emacs) for nearly 25 years. :-) Alain Picard ================================================================ In GNU Emacs 25.1.1 (x86_64-apple-darwin13.4.0, NS appkit-1265.21 Version 10.9.5 (Build 13F1911)) of 2016-09-18 built on builder10-9.porkrind.org Windowing system distributor 'Apple', version 10.3.1404 Configured using: 'configure --with-ns '--enable-locallisppath=/Library/Application Support/Emacs/${version}/site-lisp:/Library/Application Support/Emacs/site-lisp'' Configured features: NOTIFY ACL GNUTLS LIBXML2 ZLIB TOOLKIT_SCROLL_BARS NS Important settings: value of $LANG: en_AU.UTF-8 locale-coding-system: utf-8-unix Major mode: Ediff Minor modes in effect: magit-auto-revert-mode: t global-git-commit-mode: t async-bytecomp-package-mode: t show-paren-mode: t shell-dirtrack-mode: t diff-auto-refine-mode: t flx-ido-mode: t ido-everywhere: t winner-mode: t auto-insert-mode: t global-company-mode: t company-mode: t override-global-mode: t tooltip-mode: t global-eldoc-mode: t electric-indent-mode: t mouse-wheel-mode: t menu-bar-mode: t file-name-shadow-mode: t global-font-lock-mode: t font-lock-mode: t auto-composition-mode: t auto-encryption-mode: t auto-compression-mode: t buffer-read-only: t line-number-mode: t transient-mark-mode: t Recent messages: Region 29 in buffer A is empty [2 times] Refining difference region 30 ... ediff-next-difference: At end of the difference list Region 29 in buffer A is empty [2 times] Region 28 in buffer A is empty [2 times] Region 27 in buffer A is empty [2 times] Region 26 in buffer A is empty [2 times] Region 19 in buffer A is empty [4 times] Quit Saved text until " Type" Load-path shadows: /Users/ap/.emacs.d/elpa/cider-browse-ns-20140725.2249/cider-browse-ns hides /Users/ap/.emacs.d/elpa/cider-0.13.0/cider-browse-ns /Users/ap/.emacs.d/elpa/helm-20160413.2223/helm-multi-match hides /Users/ap/.emacs.d/elpa/helm-core-20160415.1131/helm-multi-match /Users/ap/.emacs.d/elpa/circe-20160413.1027/lcs hides /Users/ap/.emacs.d/elpa/lcs-20121201.555/lcs /Users/ap/.emacs.d/elpa/circe-20160413.1027/lui hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui /Users/ap/.emacs.d/elpa/circe-20160413.1027/lui-logging hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui-logging /Users/ap/.emacs.d/elpa/circe-20160413.1027/lui-irc-colors hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui-irc-colors /Users/ap/.emacs.d/elpa/circe-20160413.1027/lui-format hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui-format /Users/ap/.emacs.d/elpa/circe-20160413.1027/lui-autopaste hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui-autopaste /Users/ap/.emacs.d/elpa/circe-20160413.1027/shorten hides /Users/ap/.emacs.d/elpa/shorten-20131201.620/shorten /Users/ap/.emacs.d/elpa/color-theme-solarized-20160219.924/solarized-theme hides /Users/ap/.emacs.d/elpa/solarized-theme-20160408.1143/solarized-theme /Users/ap/.emacs.d/elpa/circe-20160413.1027/tracking hides /Users/ap/.emacs.d/elpa/tracking-20151129.319/tracking /Users/ap/.emacs.d/elpa/circe-20160413.1027/shorten hides /Users/ap/.emacs.d/elpa/tracking-20151129.319/shorten /Users/ap/.emacs.d/emacs-hacks/whitespace hides /Applications/Emacs.app/Contents/Resources/lisp/whitespace /Users/ap/.emacs.d/elpa/org-20160411/ox hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox /Users/ap/.emacs.d/elpa/org-20160411/ox-texinfo hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-texinfo /Users/ap/.emacs.d/elpa/org-20160411/ox-publish hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-publish /Users/ap/.emacs.d/elpa/org-20160411/ox-org hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-org /Users/ap/.emacs.d/elpa/org-20160411/ox-odt hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-odt /Users/ap/.emacs.d/elpa/org-20160411/ox-md hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-md /Users/ap/.emacs.d/elpa/org-20160411/ox-man hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-man /Users/ap/.emacs.d/elpa/org-20160411/ox-latex hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-latex /Users/ap/.emacs.d/elpa/org-20160411/ox-icalendar hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-icalendar /Users/ap/.emacs.d/elpa/org-20160411/ox-html hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-html /Users/ap/.emacs.d/elpa/org-20160411/ox-beamer hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-beamer /Users/ap/.emacs.d/elpa/org-20160411/ox-ascii hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-ascii /Users/ap/.emacs.d/elpa/org-20160411/org hides /Applications/Emacs.app/Contents/Resources/lisp/org/org /Users/ap/.emacs.d/elpa/org-20160411/org-w3m hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-w3m /Users/ap/.emacs.d/elpa/org-20160411/org-version hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-version /Users/ap/.emacs.d/elpa/org-20160411/org-timer hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-timer /Users/ap/.emacs.d/elpa/org-20160411/org-table hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-table /Users/ap/.emacs.d/elpa/org-20160411/org-src hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-src /Users/ap/.emacs.d/elpa/org-20160411/org-rmail hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-rmail /Users/ap/.emacs.d/elpa/org-20160411/org-protocol hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-protocol /Users/ap/.emacs.d/elpa/org-20160411/org-plot hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-plot /Users/ap/.emacs.d/elpa/org-20160411/org-pcomplete hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-pcomplete /Users/ap/.emacs.d/elpa/org-20160411/org-mouse hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-mouse /Users/ap/.emacs.d/elpa/org-20160411/org-mobile hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-mobile /Users/ap/.emacs.d/elpa/org-20160411/org-mhe hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-mhe /Users/ap/.emacs.d/elpa/org-20160411/org-macs hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-macs /Users/ap/.emacs.d/elpa/org-20160411/org-macro hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-macro /Users/ap/.emacs.d/elpa/org-20160411/org-loaddefs hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-loaddefs /Users/ap/.emacs.d/elpa/org-20160411/org-list hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-list /Users/ap/.emacs.d/elpa/org-20160411/org-irc hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-irc /Users/ap/.emacs.d/elpa/org-20160411/org-install hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-install /Users/ap/.emacs.d/elpa/org-20160411/org-inlinetask hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-inlinetask /Users/ap/.emacs.d/elpa/org-20160411/org-info hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-info /Users/ap/.emacs.d/elpa/org-20160411/org-indent hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-indent /Users/ap/.emacs.d/elpa/org-20160411/org-id hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-id /Users/ap/.emacs.d/elpa/org-20160411/org-habit hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-habit /Users/ap/.emacs.d/elpa/org-20160411/org-gnus hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-gnus /Users/ap/.emacs.d/elpa/org-20160411/org-footnote hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-footnote /Users/ap/.emacs.d/elpa/org-20160411/org-feed hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-feed /Users/ap/.emacs.d/elpa/org-20160411/org-faces hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-faces /Users/ap/.emacs.d/elpa/org-20160411/org-eshell hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-eshell /Users/ap/.emacs.d/elpa/org-20160411/org-entities hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-entities /Users/ap/.emacs.d/elpa/org-20160411/org-element hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-element /Users/ap/.emacs.d/elpa/org-20160411/org-docview hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-docview /Users/ap/.emacs.d/elpa/org-20160411/org-datetree hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-datetree /Users/ap/.emacs.d/elpa/org-20160411/org-ctags hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-ctags /Users/ap/.emacs.d/elpa/org-20160411/org-crypt hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-crypt /Users/ap/.emacs.d/elpa/org-20160411/org-compat hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-compat /Users/ap/.emacs.d/elpa/org-20160411/org-colview hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-colview /Users/ap/.emacs.d/elpa/org-20160411/org-clock hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-clock /Users/ap/.emacs.d/elpa/org-20160411/org-capture hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-capture /Users/ap/.emacs.d/elpa/org-20160411/org-bibtex hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-bibtex /Users/ap/.emacs.d/elpa/org-20160411/org-bbdb hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-bbdb /Users/ap/.emacs.d/elpa/org-20160411/org-attach hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-attach /Users/ap/.emacs.d/elpa/org-20160411/org-archive hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-archive /Users/ap/.emacs.d/elpa/org-20160411/org-agenda hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-agenda /Users/ap/.emacs.d/elpa/org-20160411/ob hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob /Users/ap/.emacs.d/elpa/org-20160411/ob-tangle hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-tangle /Users/ap/.emacs.d/elpa/org-20160411/ob-table hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-table /Users/ap/.emacs.d/elpa/org-20160411/ob-sqlite hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-sqlite /Users/ap/.emacs.d/elpa/org-20160411/ob-sql hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-sql /Users/ap/.emacs.d/elpa/org-20160411/ob-shen hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-shen /Users/ap/.emacs.d/elpa/org-20160411/ob-screen hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-screen /Users/ap/.emacs.d/elpa/org-20160411/ob-scheme hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-scheme /Users/ap/.emacs.d/elpa/org-20160411/ob-scala hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-scala /Users/ap/.emacs.d/elpa/org-20160411/ob-sass hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-sass /Users/ap/.emacs.d/elpa/org-20160411/ob-ruby hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-ruby /Users/ap/.emacs.d/elpa/org-20160411/ob-ref hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-ref /Users/ap/.emacs.d/elpa/org-20160411/ob-R hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-R /Users/ap/.emacs.d/elpa/org-20160411/ob-python hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-python /Users/ap/.emacs.d/elpa/org-20160411/ob-plantuml hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-plantuml /Users/ap/.emacs.d/elpa/org-20160411/ob-picolisp hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-picolisp /Users/ap/.emacs.d/elpa/org-20160411/ob-perl hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-perl /Users/ap/.emacs.d/elpa/org-20160411/ob-org hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-org /Users/ap/.emacs.d/elpa/org-20160411/ob-octave hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-octave /Users/ap/.emacs.d/elpa/org-20160411/ob-ocaml hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-ocaml /Users/ap/.emacs.d/elpa/org-20160411/ob-mscgen hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-mscgen /Users/ap/.emacs.d/elpa/org-20160411/ob-maxima hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-maxima /Users/ap/.emacs.d/elpa/org-20160411/ob-matlab hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-matlab /Users/ap/.emacs.d/elpa/org-20160411/ob-makefile hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-makefile /Users/ap/.emacs.d/elpa/org-20160411/ob-lob hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-lob /Users/ap/.emacs.d/elpa/org-20160411/ob-lisp hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-lisp /Users/ap/.emacs.d/elpa/org-20160411/ob-lilypond hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-lilypond /Users/ap/.emacs.d/elpa/org-20160411/ob-ledger hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-ledger /Users/ap/.emacs.d/elpa/org-20160411/ob-latex hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-latex /Users/ap/.emacs.d/elpa/org-20160411/ob-keys hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-keys /Users/ap/.emacs.d/elpa/org-20160411/ob-js hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-js /Users/ap/.emacs.d/elpa/org-20160411/ob-java hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-java /Users/ap/.emacs.d/elpa/org-20160411/ob-io hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-io /Users/ap/.emacs.d/elpa/org-20160411/ob-haskell hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-haskell /Users/ap/.emacs.d/elpa/org-20160411/ob-gnuplot hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-gnuplot /Users/ap/.emacs.d/elpa/org-20160411/ob-fortran hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-fortran /Users/ap/.emacs.d/elpa/org-20160411/ob-exp hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-exp /Users/ap/.emacs.d/elpa/org-20160411/ob-eval hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-eval /Users/ap/.emacs.d/elpa/org-20160411/ob-emacs-lisp hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-emacs-lisp /Users/ap/.emacs.d/elpa/org-20160411/ob-dot hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-dot /Users/ap/.emacs.d/elpa/org-20160411/ob-ditaa hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-ditaa /Users/ap/.emacs.d/elpa/org-20160411/ob-css hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-css /Users/ap/.emacs.d/elpa/org-20160411/ob-core hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-core /Users/ap/.emacs.d/elpa/org-20160411/ob-comint hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-comint /Users/ap/.emacs.d/elpa/org-20160411/ob-clojure hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-clojure /Users/ap/.emacs.d/elpa/org-20160411/ob-calc hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-calc /Users/ap/.emacs.d/elpa/org-20160411/ob-C hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-C /Users/ap/.emacs.d/elpa/org-20160411/ob-awk hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-awk /Users/ap/.emacs.d/elpa/org-20160411/ob-asymptote hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-asymptote /Users/ap/.emacs.d/elpa/seq-2.15/seq hides /Applications/Emacs.app/Contents/Resources/lisp/emacs-lisp/seq Features: (shadow sort emacsbug tramp-cache ediff-merg ediff-wind ediff-diff ediff-mult ediff-help ediff-init ediff-util ediff eieio-opt speedbar sb-image ezimage dframe em-unix em-term term ehelp em-script em-prompt em-ls em-hist em-pred em-glob em-dirs em-cmpl em-basic em-banner em-alias nroff-mode man log4j-mode esh-var esh-io esh-cmd esh-opt esh-ext esh-proc esh-arg esh-groups eshell esh-module esh-mode esh-util vc vc-dispatcher log-view grep macros mail-extr cider-apropos apropos linum magit-blame magit-stash magit-bisect magit-remote magit-commit magit-sequence magit magit-apply magit-wip magit-log magit-diff smerge-mode magit-core magit-autorevert autorevert filenotify magit-process magit-popup magit-mode magit-git crm magit-section magit-utils git-commit log-edit pcvs-util add-log with-editor async-bytecomp async cider-macroexpansion pulse js cc-mode cc-fonts cc-guess cc-menus cc-cmds cc-styles cc-align cc-engine cc-vars cc-defs url-cache restclient warnings tabify org-capture dabbrev dired-aux face-remap reposition sql browse-url network-stream nsm starttls misearch multi-isearch paren find-file-in-project bookmark pp view cal-china lunar solar cal-dst cal-bahai cal-islam cal-hebrew holidays hol-loaddefs diary-lib diary-loaddefs cal-iso disp-table org-rmail org-mhe org-irc org-info org-gnus org-docview doc-view subr-x jka-compr image-mode org-bibtex bibtex org-bbdb org-w3m hl-line server color-theme-solarized solarized-definitions color-theme wid-edit google-this clj-refactor pkg-info url-http tls gnutls url url-proxy url-privacy url-expand url-methods url-history mailcap url-auth url-cookie url-domsuf url-util url-gw json map lisp-mnt epl derived rx hydra lv inflections sgml-mode edn peg cider tramp-sh cider-debug cider-browse-ns cider-inspector cider-mode cider-interaction compile arc-mode archive-mode cider-repl cider-resolve cider-test cider-overlays cider-stacktrace cider-doc cider-grimoire cider-popup cider-eldoc cider-client cider-common cider-util nrepl-client tramp tramp-compat tramp-loaddefs trampver shell queue nrepl-dict cider-compat ewoc spinner clojure-mode align imenu multiple-cursors-core rect paredit yasnippet cl s whitespace-mode ob-ditaa org-timer org-table org-colview org-clock org-attach vc-git diff-mode org-id org-element avl-tree org-archive org-agenda org org-macro org-footnote org-pcomplete pcomplete org-list org-faces org-entities noutline outline org-version ob-emacs-lisp ob ob-tangle ob-ref ob-lob ob-table ob-exp org-src ob-keys ob-comint comint ansi-color ob-core ob-eval org-compat org-macs org-loaddefs find-func cal-menu calendar cal-loaddefs smex flx-ido flx ido winner whitespace autoinsert bbdb-message sendmail message dired format-spec rfc822 mml mml-sec epg mm-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047 rfc2045 ietf-drums mailabbrev mail-utils gmm-utils mailheader bbdb bbdb-site timezone ffap thingatpt url-parse auth-source gnus-util mm-util help-fns mail-prsvr password-cache url-vars company-oddmuse company-keywords company-etags etags xref cl-seq project eieio eieio-core cl-macs company-gtags company-dabbrev-code company-dabbrev company-files company-capf company-cmake company-xcode company-clang company-semantic company-eclim company-template company-css company-nxml company-bbdb company advice bookmark-ring ring my-kbd-map edmacro kmacro solarized-dark-theme solarized dash use-package diminish bind-key easy-mmode finder-inf cider-tracing-autoloads closure-lint-mode-autoloads color-theme-autoloads fringe-helper-autoloads lcs-autoloads shorten-autoloads windata-autoloads info package epg-config seq byte-opt gv bytecomp byte-compile cl-extra help-mode easymenu cconv cl-loaddefs pcase cl-lib time-date mule-util tooltip eldoc electric uniquify ediff-hook vc-hooks lisp-float-type mwheel ns-win ucs-normalize term/common-win tool-bar dnd fontset image regexp-opt fringe tabulated-list newcomment elisp-mode lisp-mode prog-mode register page menu-bar rfn-eshadow timer select scroll-bar mouse jit-lock font-lock syntax facemenu font-core frame cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian slovak czech european ethiopic indian cyrillic chinese charscript case-table epa-hook jka-cmpr-hook help simple abbrev minibuffer cl-preloaded nadvice loaddefs button faces cus-face macroexp files text-properties overlay sha1 md5 base64 format env code-pages mule custom widget hashtable-print-readable backquote kqueue cocoa ns multi-tty make-network-process emacs) Memory information: ((conses 16 1517046 206707) (symbols 48 58309 0) (miscs 40 8265 8483) (strings 32 229927 22382) (string-bytes 1 6528476) (vectors 16 135880) (vector-slots 8 3744387 160745) (floats 8 15254 10159) (intervals 56 72471 1258) (buffers 976 167)) -- --94eb2c0b73da4e17b4053cfcd9cd Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
=
Dear Maintainers,

<= /div>
In em= acs 25.1,
the code in url-http.el, line 638, states:

<= div class=3D"gmail_default"> =C2=A0 ;; Do n= ot automatically include an authorization header in the
=C2=A0 ;; redirect.= =C2=A0 If needed it will be regenerated by the relevant
=C2=A0 ;; auth schem= e when the new request happens.
=C2=A0 (setq url-http-extra-headers
(cl-remo= ve "Authorization"
=C2=A0 =C2=A0url-http-extra-headers :key &#= 39;car :test 'equal))

<= font face=3D"monospace, monospace">
I suspect this automatic regenrat= ion does not occur.
Problem: I am using restclient.el, and hitting a serv= er which
issues a redirect, and I receive a 400 Forbidden response becaus= e
the redirected call does not receive the authentication header
(I can= see this from the log of my server).

Here is a subset of my test = http file in restclient mode:
------------------
:host =3D http://localhost:4348
:driver-2 =3D goCatch 9= 999

#
GET :host/api/v2/jobs
X-Gocatch-State: {"available&= quot; : true, "lat": -33.1, "lng":150.9, "speed&qu= ot;:15, "error":5, "direction":310 }
Authorization: := driver-2
------------------

In emacs 24, this used to return:
= =C2=A0 [lots of text here snipped]
// GET http://localhost:4348/api/v2/jobs
// HTTP/1.1 200 OK
// Content-Type: application/json; charset=3Dutf-8
// Cache-Control: ma= x-age=3D0
// Content-Length: 1222
// Server: http-kit
// Date: Wed, 2= 1 Sep 2016 04:13:46 GMT
// Request duration: 0.247260s


Bu= t in emacs 25 it now returns:

No or invalid authentication details= are provided
// GET http:/= /localhost:4348/api/v2/jobs
// HTTP/1.1 401 Unauthorized
=
// Cache-C= ontrol: max-age=3D0
// Content-Length: 49
// Server: http-kit
// Date= : Wed, 21 Sep 2016 04:14:29 GMT
// Request duration: 0.131224s

<= br>
If I comment out the 3 lines starting at line 642:
=C2=A0 (setq url-ht= tp-extra-headers
(cl-remove "Authorization"
=C2=A0 =C2=A0url-htt= p-extra-headers :key 'car :test 'equal))

I get back the or= iginal, correct behaviour.

=
Thanks in advance, and thanks fo= r all the great work on
emacs... I've been appreciating your hard wor= k (and emacs) for nearly 25 years. =C2=A0:-)


=C2=A0 =C2=A0= =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0Alain Picard=
=C2= =A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0 =C2=A0
=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D= =3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D


In GNU Emacs 25.1.1 = (x86_64-apple-darwin13.4.0, NS appkit-1265.21 Version 10.9.5 (Build 13F1911= ))
=C2=A0of 2016-09-18 built on builder10-9.porkrind.org
Windowing system distributor 'Apple&#= 39;, version 10.3.1404
Configured using:
=C2=A0'configure --with-n= s '--enable-locallisppath=3D/Library/Application
=C2=A0Support/Emacs/= ${version}/site-lisp:/Library/Application
=C2=A0Support/Emacs/site-lisp&#= 39;'

Configured features:
NOTIFY ACL GNUTLS LIBXML2 ZLIB TOO= LKIT_SCROLL_BARS NS

Important settings:
=C2=A0 value of $LANG: e= n_AU.UTF-8
=C2=A0 locale-coding-system: utf-8-unix

Major mode: E= diff

Minor modes in effect:
=C2=A0 magit-auto-revert-mode: t
= =C2=A0 global-git-commit-mode: t
<= font face=3D"monospace, monospace">=C2=A0 async-bytecomp-package-mode: t
= =C2=A0 show-paren-mode: t
=C2=A0 shell-dirtrack-mode: t
=C2=A0 diff-aut= o-refine-mode: t
=C2=A0 flx-ido-mode: t
=C2=A0 ido-everywhere: t=
=C2= =A0 winner-mode: t
=C2=A0 auto-insert-mode: t
=C2=A0 global-company-mod= e: t
=C2=A0 company-mode: t
=C2=A0 override-global-mode: t
=
=C2=A0 too= ltip-mode: t
=C2=A0 global-eldoc-mode: t
=C2=A0 electric-indent-mode: t=
=C2=A0 mouse-wheel-mode: t
=C2=A0 menu-bar-mode: t
=C2=A0 file-name-= shadow-mode: t
=C2=A0 global-font-lock-mode: t
=C2=A0 font-lock-mode: t=
=C2=A0 auto-composition-mode: t
=C2=A0 auto-encryption-mode: t<= /div>
=C2= =A0 auto-compression-mode: t
=C2=A0 buffer-read-only: t
=C2=A0 line-num= ber-mode: t
=C2=A0 transient-mark-mode: t

Recent messages:
R= egion 29 in buffer A is empty [2 times]
Refining difference region 30 ...=
ediff-next-difference: At end of the difference list
Region 29 in buff= er A is empty [2 times]
Region 28 in buffer A is empty [2 times]
Region= 27 in buffer A is empty [2 times]
Region 26 in buffer A is empty [2 time= s]
Region 19 in buffer A is empty [4 times]
Quit
Saved text until &qu= ot; Type"

Load-path shadows:
/Users/ap/.emacs.d/elpa/cide= r-browse-ns-20140725.2249/cider-browse-ns hides /Users/ap/.emacs.d/elpa/cid= er-0.13.0/cider-browse-ns
/Users/ap/.emacs.d/elpa/helm-20160413.2223/helm= -multi-match hides /Users/ap/.emacs.d/elpa/helm-core-20160415.1131/helm-mul= ti-match
/Users/ap/.emacs.d/elpa/circe-20160413.1027/lcs hides /Users/ap/= .emacs.d/elpa/lcs-20121201.555/lcs
/Users/ap/.emacs.d/elpa/circe-20160413= .1027/lui hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui
/Users/ap/.e= macs.d/elpa/circe-20160413.1027/lui-logging hides /Users/ap/.emacs.d/elpa/l= ui-20140910.112/lui-logging
/Users/ap/.emacs.d/elpa/circe-20160413.1027/l= ui-irc-colors hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lui-irc-colors=
/Users/ap/.emacs.d/elpa/circe-20160413.1027/lui-format hides /Users/ap/.= emacs.d/elpa/lui-20140910.112/lui-format
/Users/ap/.emacs.d/elpa/circe-20= 160413.1027/lui-autopaste hides /Users/ap/.emacs.d/elpa/lui-20140910.112/lu= i-autopaste
/Users/ap/.emacs.d/elpa/circe-20160413.1027/shorten hides /Us= ers/ap/.emacs.d/elpa/shorten-20131201.620/shorten
/Users/ap/.emacs.d/elpa= /color-theme-solarized-20160219.924/solarized-theme hides /Users/ap/.emacs.= d/elpa/solarized-theme-20160408.1143/solarized-theme
/Users/ap/.emacs.d/e= lpa/circe-20160413.1027/tracking hides /Users/ap/.emacs.d/elpa/tracking-201= 51129.319/tracking
/Users/ap/.emacs.d/elpa/circe-20160413.1027/shorten hi= des /Users/ap/.emacs.d/elpa/tracking-20151129.319/shorten
/Users/ap/.emac= s.d/emacs-hacks/whitespace hides /Applications/Emacs.app/Contents/Resources= /lisp/whitespace
/Users/ap/.emacs.d/elpa/org-20160411/ox hides /Applicati= ons/Emacs.app/Contents/Resources/lisp/org/ox
/Users/ap/.emacs.d/elpa/org-= 20160411/ox-texinfo hides /Applications/Emacs.app/Contents/Resources/lisp/o= rg/ox-texinfo
/Users/ap/.emacs.d/elpa/org-20160411/ox-publish hides /Appl= ications/Emacs.app/Contents/Resources/lisp/org/ox-publish
/Users/ap/.emac= s.d/elpa/org-20160411/ox-org hides /Applications/Emacs.app/Contents/Resourc= es/lisp/org/ox-org
/Users/ap/.emacs.d/elpa/org-20160411/ox-odt hides /App= lications/Emacs.app/Contents/Resources/lisp/org/ox-odt
/Users/ap/.emacs.d= /elpa/org-20160411/ox-md hides /Applications/Emacs.app/Contents/Resources/l= isp/org/ox-md
/Users/ap/.emacs.d/elpa/org-20160411/ox-man hides /Applicat= ions/Emacs.app/Contents/Resources/lisp/org/ox-man
/Users/ap/.emacs.d/elpa= /org-20160411/ox-latex hides /Applications/Emacs.app/Contents/Resources/lis= p/org/ox-latex
/Users/ap/.emacs.d/elpa/org-20160411/ox-icalendar hides /A= pplications/Emacs.app/Contents/Resources/lisp/org/ox-icalendar
=
/Users/ap/= .emacs.d/elpa/org-20160411/ox-html hides /Applications/Emacs.app/Contents/R= esources/lisp/org/ox-html
/Users/ap/.emacs.d/elpa/org-20160411/ox-beamer = hides /Applications/Emacs.app/Contents/Resources/lisp/org/ox-beamer<= /div>
/User= s/ap/.emacs.d/elpa/org-20160411/ox-ascii hides /Applications/Emacs.app/Cont= ents/Resources/lisp/org/ox-ascii
<= font face=3D"monospace, monospace">/Users/ap/.emacs.d/elpa/org-20160411/org= hides /Applications/Emacs.app/Contents/Resources/lisp/org/org
=
/Users/ap/= .emacs.d/elpa/org-20160411/org-w3m hides /Applications/Emacs.app/Contents/R= esources/lisp/org/org-w3m
/Users/ap/.emacs.d/elpa/org-20160411/org-versio= n hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-version
/= Users/ap/.emacs.d/elpa/org-20160411/org-timer hides /Applications/Emacs.app= /Contents/Resources/lisp/org/org-timer
/Users/ap/.emacs.d/elpa/org-201604= 11/org-table hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-= table
/Users/ap/.emacs.d/elpa/org-20160411/org-src hides /Applications/Em= acs.app/Contents/Resources/lisp/org/org-src
/Users/ap/.emacs.d/elpa/org-2= 0160411/org-rmail hides /Applications/Emacs.app/Contents/Resources/lisp/org= /org-rmail
/Users/ap/.emacs.d/elpa/org-20160411/org-protocol hides /Appli= cations/Emacs.app/Contents/Resources/lisp/org/org-protocol
/Users/ap/.ema= cs.d/elpa/org-20160411/org-plot hides /Applications/Emacs.app/Contents/Reso= urces/lisp/org/org-plot
/Users/ap/.emacs.d/elpa/org-20160411/org-pcomplet= e hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-pcomplete
/Users/ap/.emacs.d/elpa/org-20160411/org-mouse hides /Applications/Emacs.a= pp/Contents/Resources/lisp/org/org-mouse
/Users/ap/.emacs.d/elpa/org-2016= 0411/org-mobile hides /Applications/Emacs.app/Contents/Resources/lisp/org/o= rg-mobile
/Users/ap/.emacs.d/elpa/org-20160411/org-mhe hides /Application= s/Emacs.app/Contents/Resources/lisp/org/org-mhe
/Users/ap/.emacs.d/elpa/o= rg-20160411/org-macs hides /Applications/Emacs.app/Contents/Resources/lisp/= org/org-macs
/Users/ap/.emacs.d/elpa/org-20160411/org-macro hides /Applic= ations/Emacs.app/Contents/Resources/lisp/org/org-macro
/Users/ap/.emacs.d= /elpa/org-20160411/org-loaddefs hides /Applications/Emacs.app/Contents/Reso= urces/lisp/org/org-loaddefs
/Users/ap/.emacs.d/elpa/org-20160411/org-list= hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-list<= /div>
/User= s/ap/.emacs.d/elpa/org-20160411/org-irc hides /Applications/Emacs.app/Conte= nts/Resources/lisp/org/org-irc
/Users/ap/.emacs.d/elpa/org-20160411/org-i= nstall hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-instal= l
/Users/ap/.emacs.d/elpa/org-20160411/org-inlinetask hides /Applications= /Emacs.app/Contents/Resources/lisp/org/org-inlinetask
/Users/ap/.emacs.d/= elpa/org-20160411/org-info hides /Applications/Emacs.app/Contents/Resources= /lisp/org/org-info
/Users/ap/.emacs.d/elpa/org-20160411/org-indent hides = /Applications/Emacs.app/Contents/Resources/lisp/org/org-indent
=
/Users/ap/= .emacs.d/elpa/org-20160411/org-id hides /Applications/Emacs.app/Contents/Re= sources/lisp/org/org-id
/Users/ap/.emacs.d/elpa/org-20160411/org-habit hi= des /Applications/Emacs.app/Contents/Resources/lisp/org/org-habit
/Users/= ap/.emacs.d/elpa/org-20160411/org-gnus hides /Applications/Emacs.app/Conten= ts/Resources/lisp/org/org-gnus
/Users/ap/.emacs.d/elpa/org-20160411/org-f= ootnote hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-footn= ote
/Users/ap/.emacs.d/elpa/org-20160411/org-feed hides /Applications/Ema= cs.app/Contents/Resources/lisp/org/org-feed
/Users/ap/.emacs.d/elpa/org-2= 0160411/org-faces hides /Applications/Emacs.app/Contents/Resources/lisp/org= /org-faces
/Users/ap/.emacs.d/elpa/org-20160411/org-eshell hides /Applica= tions/Emacs.app/Contents/Resources/lisp/org/org-eshell
/Users/ap/.emacs.d= /elpa/org-20160411/org-entities hides /Applications/Emacs.app/Contents/Reso= urces/lisp/org/org-entities
/Users/ap/.emacs.d/elpa/org-20160411/org-elem= ent hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-element
/Users/ap/.emacs.d/elpa/org-20160411/org-docview hides /Applications/Emacs= .app/Contents/Resources/lisp/org/org-docview
/Users/ap/.emacs.d/elpa/org-= 20160411/org-datetree hides /Applications/Emacs.app/Contents/Resources/lisp= /org/org-datetree
/Users/ap/.emacs.d/elpa/org-20160411/org-ctags hides /A= pplications/Emacs.app/Contents/Resources/lisp/org/org-ctags
/Users/ap/.em= acs.d/elpa/org-20160411/org-crypt hides /Applications/Emacs.app/Contents/Re= sources/lisp/org/org-crypt
/Users/ap/.emacs.d/elpa/org-20160411/org-compa= t hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-compat
/U= sers/ap/.emacs.d/elpa/org-20160411/org-colview hides /Applications/Emacs.ap= p/Contents/Resources/lisp/org/org-colview
/Users/ap/.emacs.d/elpa/org-201= 60411/org-clock hides /Applications/Emacs.app/Contents/Resources/lisp/org/o= rg-clock
/Users/ap/.emacs.d/elpa/org-20160411/org-capture hides /Applicat= ions/Emacs.app/Contents/Resources/lisp/org/org-capture
/Users/ap/.emacs.d= /elpa/org-20160411/org-bibtex hides /Applications/Emacs.app/Contents/Resour= ces/lisp/org/org-bibtex
/Users/ap/.emacs.d/elpa/org-20160411/org-bbdb hid= es /Applications/Emacs.app/Contents/Resources/lisp/org/org-bbdb
/Users/ap= /.emacs.d/elpa/org-20160411/org-attach hides /Applications/Emacs.app/Conten= ts/Resources/lisp/org/org-attach
<= font face=3D"monospace, monospace">/Users/ap/.emacs.d/elpa/org-20160411/org= -archive hides /Applications/Emacs.app/Contents/Resources/lisp/org/org-arch= ive
/Users/ap/.emacs.d/elpa/org-20160411/org-agenda hides /Applications/E= macs.app/Contents/Resources/lisp/org/org-agenda
/Users/ap/.emacs.d/elpa/o= rg-20160411/ob hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob=
/Users/ap/.emacs.d/elpa/org-20160411/ob-tangle hides /Applications/Emacs= .app/Contents/Resources/lisp/org/ob-tangle
/Users/ap/.emacs.d/elpa/org-20= 160411/ob-table hides /Applications/Emacs.app/Contents/Resources/lisp/org/o= b-table
/Users/ap/.emacs.d/elpa/org-20160411/ob-sqlite hides /Application= s/Emacs.app/Contents/Resources/lisp/org/ob-sqlite
/Users/ap/.emacs.d/elpa= /org-20160411/ob-sql hides /Applications/Emacs.app/Contents/Resources/lisp/= org/ob-sql
/Users/ap/.emacs.d/elpa/org-20160411/ob-shen hides /Applicatio= ns/Emacs.app/Contents/Resources/lisp/org/ob-shen
/Users/ap/.emacs.d/elpa/= org-20160411/ob-screen hides /Applications/Emacs.app/Contents/Resources/lis= p/org/ob-screen
/Users/ap/.emacs.d/elpa/org-20160411/ob-scheme hides /App= lications/Emacs.app/Contents/Resources/lisp/org/ob-scheme
/Users/ap/.emac= s.d/elpa/org-20160411/ob-scala hides /Applications/Emacs.app/Contents/Resou= rces/lisp/org/ob-scala
/Users/ap/.emacs.d/elpa/org-20160411/ob-sass hide= s /Applications/Emacs.app/Contents/Resources/lisp/org/ob-sass
<= div class=3D"gmail_default">/Users/ap/.= emacs.d/elpa/org-20160411/ob-ruby hides /Applications/Emacs.app/Contents/Re= sources/lisp/org/ob-ruby
/Users/ap/.emacs.d/elpa/org-20160411/ob-ref hide= s /Applications/Emacs.app/Contents/Resources/lisp/org/ob-ref
/Users/ap/.e= macs.d/elpa/org-20160411/ob-R hides /Applications/Emacs.app/Contents/Resour= ces/lisp/org/ob-R
/Users/ap/.emacs.d/elpa/org-20160411/ob-python hides /A= pplications/Emacs.app/Contents/Resources/lisp/org/ob-python
/Users/ap/.em= acs.d/elpa/org-20160411/ob-plantuml hides /Applications/Emacs.app/Contents/= Resources/lisp/org/ob-plantuml
/Users/ap/.emacs.d/elpa/org-20160411/ob-pi= colisp hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-picolis= p
/Users/ap/.emacs.d/elpa/org-20160411/ob-perl hides /Applications/Emacs.= app/Contents/Resources/lisp/org/ob-perl
/Users/ap/.emacs.d/elpa/org-20160= 411/ob-org hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-org=
/Users/ap/.emacs.d/elpa/org-20160411/ob-octave hides /Applications/Emacs= .app/Contents/Resources/lisp/org/ob-octave
/Users/ap/.emacs.d/elpa/org-20= 160411/ob-ocaml hides /Applications/Emacs.app/Contents/Resources/lisp/org/o= b-ocaml
/Users/ap/.emacs.d/elpa/org-20160411/ob-mscgen hides /Application= s/Emacs.app/Contents/Resources/lisp/org/ob-mscgen
/Users/ap/.emacs.d/elpa= /org-20160411/ob-maxima hides /Applications/Emacs.app/Contents/Resources/li= sp/org/ob-maxima
/Users/ap/.emacs.d/elpa/org-20160411/ob-matlab hides /Ap= plications/Emacs.app/Contents/Resources/lisp/org/ob-matlab
/Users/ap/.ema= cs.d/elpa/org-20160411/ob-makefile hides /Applications/Emacs.app/Contents/R= esources/lisp/org/ob-makefile
/Users/ap/.emacs.d/elpa/org-20160411/ob-lob= hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-lob
/Users/= ap/.emacs.d/elpa/org-20160411/ob-lisp hides /Applications/Emacs.app/Content= s/Resources/lisp/org/ob-lisp
/Users/ap/.emacs.d/elpa/org-20160411/ob-lily= pond hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-lilypond<= /font>
/Users/ap/.emacs.d/elpa/org-201= 60411/ob-latex hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob= -latex
/Users/ap/.emacs.d/elpa/org-20160411/ob-keys hides /Applications/E= macs.app/Contents/Resources/lisp/org/ob-keys
/Users/ap/.emacs.d/elpa/org-= 20160411/ob-js hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob= -js
/Users/ap/.emacs.d/elpa/org-20160411/ob-java hides /Applications/Emac= s.app/Contents/Resources/lisp/org/ob-java
/Users/ap/.emacs.d/elpa/org-201= 60411/ob-io hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-io=
/Users/ap/.emacs.d/elpa/org-20160411/ob-haskell hides /Applications/Emac= s.app/Contents/Resources/lisp/org/ob-haskell
/Users/ap/.emacs.d/elpa/org-= 20160411/ob-gnuplot hides /Applications/Emacs.app/Contents/Resources/lisp/o= rg/ob-gnuplot
/Users/ap/.emacs.d/elpa/org-20160411/ob-fortran hides /Appl= ications/Emacs.app/Contents/Resources/lisp/org/ob-fortran
/Users/ap/.emac= s.d/elpa/org-20160411/ob-exp hides /Applications/Emacs.app/Contents/Resourc= es/lisp/org/ob-exp
/Users/ap/.emacs.d/elpa/org-20160411/ob-eval hides /Ap= plications/Emacs.app/Contents/Resources/lisp/org/ob-eval
/Users/ap/.emacs= .d/elpa/org-20160411/ob-emacs-lisp hides /Applications/Emacs.app/Contents/R= esources/lisp/org/ob-emacs-lisp
/Users/ap/.emacs.d/elpa/org-20160411/ob-d= ot hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-dot<= /div>
/User= s/ap/.emacs.d/elpa/org-20160411/ob-ditaa hides /Applications/Emacs.app/Cont= ents/Resources/lisp/org/ob-ditaa
<= font face=3D"monospace, monospace">/Users/ap/.emacs.d/elpa/org-20160411/ob-= css hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-css=
/Use= rs/ap/.emacs.d/elpa/org-20160411/ob-core hides /Applications/Emacs.app/Cont= ents/Resources/lisp/org/ob-core
/Users/ap/.emacs.d/elpa/org-20160411/ob-c= omint hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-comint
/Users/ap/.emacs.d/elpa/org-20160411/ob-clojure hides /Applications/Emacs.= app/Contents/Resources/lisp/org/ob-clojure
/Users/ap/.emacs.d/elpa/org-20= 160411/ob-calc hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob= -calc
/Users/ap/.emacs.d/elpa/org-20160411/ob-C hides /Applications/Emacs= .app/Contents/Resources/lisp/org/ob-C
/Users/ap/.emacs.d/elpa/org-2016041= 1/ob-awk hides /Applications/Emacs.app/Contents/Resources/lisp/org/ob-awk
/Users/ap/.emacs.d/elpa/org-20160411/ob-asymptote hides /Applications/Emac= s.app/Contents/Resources/lisp/org/ob-asymptote
/Users/ap/.emacs.d/elpa/se= q-2.15/seq hides /Applications/Emacs.app/Contents/Resources/lisp/emacs-lisp= /seq

Features:
(shadow sort emacsbug tramp-cache ediff-merg edif= f-wind ediff-diff
ediff-mult ediff-help ediff-init ediff-util ediff eieio= -opt speedbar
sb-image ezimage dframe em-unix em-term term ehelp em-scrip= t em-prompt
em-ls em-hist em-pred em-glob em-dirs em-cmpl em-basic em-ban= ner
em-alias nroff-mode man log4j-mode esh-var esh-io esh-cmd esh-opt
e= sh-ext esh-proc esh-arg esh-groups eshell esh-module esh-mode esh-util
vc= vc-dispatcher log-view grep macros mail-extr cider-apropos apropos<= /div>
linum= magit-blame magit-stash magit-bisect magit-remote magit-commit
magit-seq= uence magit magit-apply magit-wip magit-log magit-diff
smerge-mode magit-= core magit-autorevert autorevert filenotify
magit-process magit-popup mag= it-mode magit-git crm magit-section
magit-utils git-commit log-edit pcvs-= util add-log with-editor
async-bytecomp async cider-macroexpansion pulse = js cc-mode cc-fonts
cc-guess cc-menus cc-cmds cc-styles cc-align cc-engin= e cc-vars cc-defs
url-cache restclient warnings tabify org-capture dabbre= v dired-aux
face-remap reposition sql browse-url network-stream nsm start= tls
misearch multi-isearch paren find-file-in-project bookmark pp view
= cal-china lunar solar cal-dst cal-bahai cal-islam cal-hebrew holidays
hol= -loaddefs diary-lib diary-loaddefs cal-iso disp-table org-rmail
org-mhe o= rg-irc org-info org-gnus org-docview doc-view subr-x jka-compr
=
image-mode= org-bibtex bibtex org-bbdb org-w3m hl-line server
color-theme-solarize= d solarized-definitions color-theme wid-edit
google-this clj-refactor pkg= -info url-http tls gnutls url url-proxy
url-privacy url-expand url-method= s url-history mailcap url-auth
url-cookie url-domsuf url-util url-gw json= map lisp-mnt epl derived rx
hydra lv inflections sgml-mode edn peg cider= tramp-sh cider-debug
cider-browse-ns cider-inspector cider-mode cider-= interaction compile
arc-mode archive-mode cider-repl cider-resolve cider-= test cider-overlays
cider-stacktrace cider-doc cider-grimoire cider-popup= cider-eldoc
cider-client cider-common cider-util nrepl-client tramp tram= p-compat
tramp-loaddefs trampver shell queue nrepl-dict cider-compat ewoc= spinner
clojure-mode align imenu multiple-cursors-core rect paredit yasn= ippet cl
s whitespace-mode ob-ditaa org-timer org-table org-colview org-c= lock
org-attach vc-git diff-mode org-id org-element avl-tree org-archive<= /font>
= org-faces org-entities noutline outline org-version ob-emacs-lisp ob=
ob-t= angle ob-ref ob-lob ob-table ob-exp org-src ob-keys ob-comint comint=
ansi= -color ob-core ob-eval org-compat org-macs org-loaddefs find-func
cal-men= u calendar cal-loaddefs smex flx-ido flx ido winner whitespace
=
autoinsert= bbdb-message sendmail message dired format-spec rfc822 mml
mml-sec epg m= m-decode mm-bodies mm-encode mail-parse rfc2231 rfc2047
rfc2045 ietf-drum= s mailabbrev mail-utils gmm-utils mailheader bbdb
bbdb-site timezone ffap= thingatpt url-parse auth-source gnus-util
mm-util help-fns mail-prsvr pa= ssword-cache url-vars company-oddmuse
company-keywords company-etags etag= s xref cl-seq project eieio
eieio-core cl-macs company-gtags company-dabb= rev-code company-dabbrev
company-files company-capf company-cmake company= -xcode company-clang
company-semantic company-eclim company-template comp= any-css company-nxml
company-bbdb company advice bookmark-ring ring my-kb= d-map edmacro kmacro
solarized-dark-theme solarized dash use-package dimi= nish bind-key
easy-mmode finder-inf cider-tracing-autoloads
<= div class=3D"gmail_default">closure-lin= t-mode-autoloads color-theme-autoloads
fringe-helper-autoloads lcs-autolo= ads shorten-autoloads
windata-autoloads info package epg-config seq byt= e-opt gv bytecomp
byte-compile cl-extra help-mode easymenu cconv cl-loadd= efs pcase cl-lib
time-date mule-util tooltip eldoc electric uniquify edif= f-hook vc-hooks
lisp-float-type mwheel ns-win ucs-normalize term/common-w= in tool-bar dnd
fontset image regexp-opt fringe tabulated-list newcomment= elisp-mode
lisp-mode prog-mode register page menu-bar rfn-eshadow timer = select
scroll-bar mouse jit-lock font-lock syntax facemenu font-core fram= e
cl-generic cham georgian utf-8-lang misc-lang vietnamese tibetan thai
tai-viet lao korean japanese eucjp-ms cp51932 hebrew greek romanian=
slov= ak czech european ethiopic indian cyrillic chinese charscript
<= div class=3D"gmail_default">case-table = epa-hook jka-cmpr-hook help simple abbrev minibuffer
cl-preloaded nadvice= loaddefs button faces cus-face macroexp files
text-properties overlay sh= a1 md5 base64 format env code-pages mule
custom widget hashtable-print-re= adable backquote kqueue cocoa ns
<= font face=3D"monospace, monospace">multi-tty make-network-process emacs)
=
Memory information:
((conses 16 1517046 206707)
=C2=A0(symbols 4= 8 58309 0)
=C2=A0(miscs 40 8265 8483)
=C2=A0(strings 32 229927 22382)
=C2=A0(string-bytes 1 6528476)
=C2=A0(vectors 16 135880)
=C2=A0(vector= -slots 8 3744387 160745)
=C2=A0(floats 8 15254 10159)
=C2=A0(intervals = 56 72471 1258)
=C2=A0(buffers 976 167))


=C2=A0
--94eb2c0b73da4e17b4053cfcd9cd-- From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Andreas Schwab Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 21 Sep 2016 08:16:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Alain Picard Cc: 24490@debbugs.gnu.org Received: via spool by 24490-submit@debbugs.gnu.org id=B24490.147444570820294 (code B ref 24490); Wed, 21 Sep 2016 08:16:01 +0000 Received: (at 24490) by debbugs.gnu.org; 21 Sep 2016 08:15:08 +0000 Received: from localhost ([127.0.0.1]:58753 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmcgO-0005HG-9B for submit@debbugs.gnu.org; Wed, 21 Sep 2016 04:15:08 -0400 Received: from mx2.suse.de ([195.135.220.15]:43910) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmcgN-0005H8-2d for 24490@debbugs.gnu.org; Wed, 21 Sep 2016 04:15:07 -0400 X-Virus-Scanned: by amavisd-new at test-mx.suse.de Received: from relay2.suse.de (charybdis-ext.suse.de [195.135.220.254]) by mx2.suse.de (Postfix) with ESMTP id DCE91ABA5; Wed, 21 Sep 2016 08:15:05 +0000 (UTC) From: Andreas Schwab References: X-Yow: It's today's SPECIAL! Date: Wed, 21 Sep 2016 10:15:05 +0200 In-Reply-To: (Alain Picard's message of "Wed, 21 Sep 2016 14:19:18 +1000") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/24.5 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: -5.4 (-----) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -5.4 (-----) On Sep 21 2016, Alain Picard wrote: > Problem: I am using restclient.el, and hitting a server which > issues a redirect, and I receive a 400 Forbidden response because > the redirected call does not receive the authentication header > (I can see this from the log of my server). How does curl or wget handle this? Andreas. -- Andreas Schwab, SUSE Labs, schwab@suse.de GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE 1748 E4D4 88E3 0EEA B9D7 "And now for something completely different." From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Alain Picard Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 22 Sep 2016 00:02:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Andreas Schwab Cc: 24490@debbugs.gnu.org Received: via spool by 24490-submit@debbugs.gnu.org id=B24490.147450251812322 (code B ref 24490); Thu, 22 Sep 2016 00:02:02 +0000 Received: (at 24490) by debbugs.gnu.org; 22 Sep 2016 00:01:58 +0000 Received: from localhost ([127.0.0.1]:60053 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmrSg-0003Cg-0a for submit@debbugs.gnu.org; Wed, 21 Sep 2016 20:01:58 -0400 Received: from mail-vk0-f49.google.com ([209.85.213.49]:33180) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1bmrSe-0003CT-JH for 24490@debbugs.gnu.org; Wed, 21 Sep 2016 20:01:57 -0400 Received: by mail-vk0-f49.google.com with SMTP id 192so4213401vkl.0 for <24490@debbugs.gnu.org>; Wed, 21 Sep 2016 17:01:56 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gocatch-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc; bh=o/ZsNWnXAV+m0XZdQ2VhxV/wk+lhEmzN85ZtZaaSpKQ=; b=vQulpJyE+8FjBx7cQq38BnTc2qaEYGANT7LLq/p34CnLzVPnHpsQWxq1RmRm6Xd3ri hR6hm/yftKC0ZDpoiFKCMFHaYcqo13TYlzsSJngqPvBKA/dx1yTd++0AAY0nS+wV7ZBy L/hZVCjAGoo+iyn+diS3u+6HpZ5OXVBR22QvKMYD4L+F98V5T3EMwJ+1N6nNMf9jm3zb jhRAxyZOzAcIn0v7uyGtHyMSbBTsDmo4C4v5qvNW1rNoDkdjpA7/46nbJfc/KbKR9AdG 9VI1mCeCR64TuNc6bL2SRoFEZ0HEhOh2a8UoaqeVAF+hXuuRqXe+YgU1fztJOrb0NqIl rM3g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20130820; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc; bh=o/ZsNWnXAV+m0XZdQ2VhxV/wk+lhEmzN85ZtZaaSpKQ=; b=mGD7mLBYJ+fFqrNaoG0xEbipTwtO6kTkd0vNM/QxO2YDRh2xdwkV5roiyCvajC21yV L5OXNPg4UVdPLzbad/JFOQq7QomcG1OB76T/Vl3slQUZHQjo3lnw9E4aHC63ozQRfJf9 irPw4x4P7WnE6AnBdT9v3jnfUEaMrwLRM1bEwRHZCAFUllimSvBUkvuftlUEVP2alzGa NQGwKgRoqeBXJ7NFtvMZw88pkLjp1RFP9JLUNwbgEr+vzCmqFXK7awlpWeQJxNt+JIEA Q7bKqS2kOneWBFxIGJqqiJm3dDSllZmM0aeswEX0dpYQG3HQQf5U6FfXUFYcFWWuLE5L f65g== X-Gm-Message-State: AE9vXwNFYBqmeGPffBBNV+/Du0pBPTTofhQQICh/wHFfq+tEQ6Vb/Xb1fF1523RtNboJGnDj7EAswPPmh6jauwBm4asLKEIjpVuxhDKm6CekAK6w4IXprPbb/y8lLoAiSdHQrvE6q+MMQ+uIUyY= X-Received: by 10.31.221.67 with SMTP id u64mr520769vkg.45.1474502511025; Wed, 21 Sep 2016 17:01:51 -0700 (PDT) MIME-Version: 1.0 Received: by 10.103.122.150 with HTTP; Wed, 21 Sep 2016 17:01:50 -0700 (PDT) In-Reply-To: References: From: Alain Picard Date: Thu, 22 Sep 2016 10:01:50 +1000 Message-ID: Content-Type: multipart/alternative; boundary=94eb2c07dc9263f327053d0d5ec2 X-Spam-Score: 1.2 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Well, curl gives you back the 303 (See Other) with the Location header, unless you add -L (follow redirection) in which case it reposts any original header (including Authorization) to the new location. i.e. "it just works". [...] Content analysis details: (1.2 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.213.49 listed in dnsbl.sorbs.net] -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.213.49 listed in list.dnswl.org] 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 0.0 HTML_MESSAGE BODY: HTML included in message -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.213.49 listed in wl.mailspike.net] -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid 0.0 T_REMOTE_IMAGE Message contains an external image X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: 1.1 (+) X-Spam-Report: Spam detection software, running on the system "debbugs.gnu.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see the administrator of that system for details. Content preview: Well, curl gives you back the 303 (See Other) with the Location header, unless you add -L (follow redirection) in which case it reposts any original header (including Authorization) to the new location. i.e. "it just works". [...] Content analysis details: (1.1 points, 10.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -0.0 RCVD_IN_DNSWL_NONE RBL: Sender listed at http://www.dnswl.org/, no trust [209.85.213.49 listed in list.dnswl.org] -0.0 RCVD_IN_MSPIKE_H3 RBL: Good reputation (+3) [209.85.213.49 listed in wl.mailspike.net] 0.5 RCVD_IN_SORBS_SPAM RBL: SORBS: sender is a spam source [209.85.213.49 listed in dnsbl.sorbs.net] 0.7 SPF_NEUTRAL SPF: sender does not match SPF record (neutral) 0.0 HTML_MESSAGE BODY: HTML included in message -0.0 RCVD_IN_MSPIKE_WL Mailspike good senders 0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid --94eb2c07dc9263f327053d0d5ec2 Content-Type: text/plain; charset=UTF-8 Well, curl gives you back the 303 (See Other) with the Location header, unless you add -L (follow redirection) in which case it reposts any original header (including Authorization) to the new location. i.e. "it just works". What would be nice for restclient is a separate keystroke which either does or does not follow the redirection; sometimes you want to debug the initial hop. But the default should be to do what it does now, which is to follow; i.e. "act like a browser". Hope this helps. Alain On 21 September 2016 at 18:15, Andreas Schwab wrote: > On Sep 21 2016, Alain Picard wrote: > > > Problem: I am using restclient.el, and hitting a server which > > issues a redirect, and I receive a 400 Forbidden response because > > the redirected call does not receive the authentication header > > (I can see this from the log of my server). > > How does curl or wget handle this? > > Andreas. > > -- > Andreas Schwab, SUSE Labs, schwab@suse.de > GPG Key fingerprint = 0196 BAD8 1CE9 1970 F4BE 1748 E4D4 88E3 0EEA B9D7 > "And now for something completely different." > -- --94eb2c07dc9263f327053d0d5ec2 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: quoted-printable
Well, curl gives you back the 303 (See Other) with
the Locati= on header, unless you add -L (follow redirection)
in which case it reposts= any original header (including Authorization) to the new location. =C2=A0i= .e. "it just works".

What would be nice for restclient is = a separate keystroke
which either does or does not follow the redirection;= sometimes
you want to debug the initial hop.=C2=A0 But the default should= be
to do what it does now, which is to follow; i.e. "act like a brow= ser".

Hope this helps.

=C2=A0 Alain

On 21 September 2016 at 1= 8:15, Andreas Schwab <schwab@suse.de> wrote:
On Sep 21 2016, Alain Picard <alain@gocatch.com> wrote:

> Problem: I am using restclient.el, and hitting a server which
> issues a redirect, and I receive a 400 Forbidden response because
> the redirected call does not receive the authentication header
> (I can see this from the log of my server).

How does curl or wget handle this?

Andreas.

--
Andreas Schwab, SUSE Labs, schwab@suse.de=
GPG Key fingerprint =3D 0196 BAD8 1CE9 1970 F4BE=C2=A0 1748 E4D4 88E3 0EEA = B9D7
"And now for something completely different."


=C2=A0
--94eb2c07dc9263f327053d0d5ec2-- From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Tue, 06 Jul 2021 15:45:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: To: Alain Picard Cc: 24490@debbugs.gnu.org, Thomas Fitzsimmons Received: via spool by 24490-submit@debbugs.gnu.org id=B24490.162558625524277 (code B ref 24490); Tue, 06 Jul 2021 15:45:02 +0000 Received: (at 24490) by debbugs.gnu.org; 6 Jul 2021 15:44:15 +0000 Received: from localhost ([127.0.0.1]:49793 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m0nF9-0006JU-Cv for submit@debbugs.gnu.org; Tue, 06 Jul 2021 11:44:15 -0400 Received: from quimby.gnus.org ([95.216.78.240]:41856) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m0nF7-0006JG-5J for 24490@debbugs.gnu.org; Tue, 06 Jul 2021 11:44:13 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=6C2mjWmGoajirpt64Tm2VGf7XIe1UiDipC27APO1exQ=; b=jBH+0Np5HAvCFPlPErZd3AolPS Ee9oqJrj5Ig2OSGLI4737mnyPesQ/ugqAyvr4v2XklcwD/G8CG6+Flg5Mrvovmg8hqwmWcrdRfMxJ y3TbGxeH+E5GtFDtBup4FTN1TEzEivserGuKrxeCnHYSwlucl/AB+gj/Lhncq/6ImTro=; Received: from cm-84.212.220.105.getinternet.no ([84.212.220.105] helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1m0nEx-0002bR-81; Tue, 06 Jul 2021 17:44:05 +0200 From: Lars Ingebrigtsen References: X-Now-Playing: Black Midi's _Live on Canal St, NYC_: "Live on Canal St, NYC" Date: Tue, 06 Jul 2021 17:44:00 +0200 In-Reply-To: (Alain Picard's message of "Wed, 21 Sep 2016 14:19:18 +1000") Message-ID: <87sg0rphvj.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Alain Picard writes: > Dear Maintainers, > > In emacs 25.1, > the code in url-http.el, line 638, states: > > ;; Do not automatically include an authorization header in the > ;; redirect. If needed it will be regenerated b [...] Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Alain Picard writes: > Dear Maintainers, > > In emacs 25.1, > the code in url-http.el, line 638, states: > > ;; Do not automatically include an authorization header in the > ;; redirect. If needed it will be regenerated by the relevant > ;; auth scheme when the new request happens. > (setq url-http-extra-headers > (cl-remove "Authorization" > url-http-extra-headers :key 'car :test 'equal)) > > I suspect this automatic regenration does not occur. I think this code is basically correct -- if the auth scheme has added something to url-http-extra-headers, then that has to be removed when doing the redirect, because otherwise we might be sending the auth to a completely wrong server, with the security implications of that. > Problem: I am using restclient.el, and hitting a server which > issues a redirect, and I receive a 400 Forbidden response because > the redirected call does not receive the authentication header > (I can see this from the log of my server). I think this must be a bug in restclient.el -- it should instead use an auth scheme that re-adds the Authorization header. I think. The URL interface is pretty vague here, as it is with many other things... Hm... Reading (defun url-http-create-request () [...] (auth (if (cdr-safe (assoc "Authorization" url-http-extra-headers)) nil (url-get-authentication (or (and (boundp 'proxy-info) proxy-info) url-http-target-url) nil 'any nil))) the auth is never added to `url-http-extra-headers', so perhaps that's not correct anyway -- it should be possible for the user to put Authorization in `url-http-extra-headers', and then have that be heeded even over the redirect. I've added Thomas to the CCs; perhaps he has some insights here. (Also see Bug#21350.) -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Tue Jul 06 11:44:17 2021 Received: (at control) by debbugs.gnu.org; 6 Jul 2021 15:44:17 +0000 Received: from localhost ([127.0.0.1]:49796 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m0nFB-0006Ji-M5 for submit@debbugs.gnu.org; Tue, 06 Jul 2021 11:44:17 -0400 Received: from quimby.gnus.org ([95.216.78.240]:41870) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m0nF9-0006JL-Um for control@debbugs.gnu.org; Tue, 06 Jul 2021 11:44:16 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=BEOUm8pPVKOmDPL0a3fucVujsJuYFAzLTYToTN9y3l4=; b=TjFlvyE47mwT8CfSTJliJGt0SB yo2gboQIKd6ZYSDCzFzk4Bej9e9xCLNCwyLrxnSrBhWLj0j+qWSYwdFMkAGUy3MfH2WoGlIv37UAx bapQGTXlQk5OVpqRwVIZQpTstgKYGhk/c/aOXkV8tGHN4QyU2czQSl9aZivm10RqU20s=; Received: from cm-84.212.220.105.getinternet.no ([84.212.220.105] helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1m0nF2-0002bd-CX for control@debbugs.gnu.org; Tue, 06 Jul 2021 17:44:10 +0200 Date: Tue, 06 Jul 2021 17:44:07 +0200 Message-Id: <87r1gbphvc.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #24490 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: tags 24490 + moreinfo quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) tags 24490 + moreinfo quit From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Thomas Fitzsimmons Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Thu, 08 Jul 2021 21:35:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: moreinfo To: Lars Ingebrigtsen Cc: Alain Picard , 24490@debbugs.gnu.org Received: via spool by 24490-submit@debbugs.gnu.org id=B24490.162578007030653 (code B ref 24490); Thu, 08 Jul 2021 21:35:02 +0000 Received: (at 24490) by debbugs.gnu.org; 8 Jul 2021 21:34:30 +0000 Received: from localhost ([127.0.0.1]:57755 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m1bfC-0007yK-2r for submit@debbugs.gnu.org; Thu, 08 Jul 2021 17:34:30 -0400 Received: from mail-qt1-f179.google.com ([209.85.160.179]:45638) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m1bf8-0007y4-LX for 24490@debbugs.gnu.org; Thu, 08 Jul 2021 17:34:28 -0400 Received: by mail-qt1-f179.google.com with SMTP id z25so3299888qto.12 for <24490@debbugs.gnu.org>; Thu, 08 Jul 2021 14:34:26 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fitzsim-org.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=0E1BKQM5mFdRaYTH3rRDgm7Mki6GUffZXWQiAn+j0ns=; b=TxH6c9F4PsqzyUueO51KvTGobNqz8hQrKTQn4PRE1ZUR8qo4IpfEcVfVDzJYGp5EEb P7RCzgRiappuZ58nfnilm4MdUfz8UmPr5Y/5PVYWSgxjXMake/UBVd8JSUGInBiMaRpp 5l/nY9B+tWC149jL0kQGT3ZcY37azPnLNNwxSeZ7EFQ73dmskLop9TI2jNWxUCkQn+wB 9R8PDMNnEt1ldv53CC+bEipU33zDaU8cWGtnSpZj5PmitgvuowOG5Q3Bon//XmsXhpZw 6C3yUHDCeclPGM531tzTlooYm1TyAzpAX5eQSBcGvcGvQRgObox/tfhQiGPbYdEtegDn ZyGw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=0E1BKQM5mFdRaYTH3rRDgm7Mki6GUffZXWQiAn+j0ns=; b=XqzCYqrwJgjsUlrfAWaPjAXaQfoXQlt9qULUv35bNiPScjwFmcmjW04cMxnCy7PNSN XUfYnG9Uxtz2g3G7idjC3omcPisxg09O2MFpeb9JLQuQzRc6t/rzZSg1bl0R5dybY7dD cQRzKF96m7ejcrahlSR255okQz1cr6oa8Jw3gAZCffRncBJR7GbP+tsUGOkclDJyX7F0 /oBVh+dGdEEJ2ksI/5OC4OEun3UwIDP8Fg+jHzRKVC6I5Z9ltplqYpRPdl36tFKswvAX hOCWycpyAgK/ajj/0STmdSuZib8SI7gds3OKtrZcORm9lhhGzG/wfZ89Gm2CbXEe7e76 rpxQ== X-Gm-Message-State: AOAM531gHy1ITLX/yxGbyHIitAJHjqhbLpD58b6lugaLU8S7ZN2Hj6Du 9Y7JeNmcEuvFHfnQCqQodgls9RhzJl3CqxEb X-Google-Smtp-Source: ABdhPJwTqVQOCp4QNdj/WQoOk0YgiJsvRhlbw0Yr9xfhFslf7P/C/vn4jCaLG5jJNmXysiSVy+4urA== X-Received: by 2002:ac8:4a8b:: with SMTP id l11mr20230761qtq.250.1625780060788; Thu, 08 Jul 2021 14:34:20 -0700 (PDT) Received: from localhost.localdomain (69-165-165-189.dsl.teksavvy.com. [69.165.165.189]) by smtp.gmail.com with ESMTPSA id n191sm1602436qke.10.2021.07.08.14.34.19 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 08 Jul 2021 14:34:20 -0700 (PDT) From: Thomas Fitzsimmons References: <87sg0rphvj.fsf@gnus.org> Date: Thu, 08 Jul 2021 17:34:19 -0400 In-Reply-To: <87sg0rphvj.fsf@gnus.org> (Lars Ingebrigtsen's message of "Tue, 06 Jul 2021 17:44:00 +0200") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Lars Ingebrigtsen writes: > Alain Picard writes: > >> Dear Maintainers, >> >> In emacs 25.1, >> the code in url-http.el, line 638, states: >> >> ;; Do not automatically include an authorization header in the >> ;; redirect. If needed it will be regenerated by the relevant >> ;; auth scheme when the new request happens. >> (setq url-http-extra-headers >> (cl-remove "Authorization" >> url-http-extra-headers :key 'car :test 'equal)) >> >> I suspect this automatic regenration does not occur. > > I think this code is basically correct -- if the auth scheme has added > something to url-http-extra-headers, then that has to be removed when > doing the redirect, because otherwise we might be sending the auth to a > completely wrong server, with the security implications of that. > >> Problem: I am using restclient.el, and hitting a server which >> issues a redirect, and I receive a 400 Forbidden response because >> the redirected call does not receive the authentication header >> (I can see this from the log of my server). > > I think this must be a bug in restclient.el -- it should instead use an > auth scheme that re-adds the Authorization header. It looks like restclient.el uses advice to skip url-http-handle-authentication if it (restclient) is in the middle of a request. Alain, to rule out that advice as being responsible, can you do: M-: (ad-deactivate 'url-http-handle-authentication) then try the API call again? Thomas From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Thomas Fitzsimmons Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 14 Jul 2021 17:48:02 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: moreinfo To: Lars Ingebrigtsen Cc: Alain Picard , 24490@debbugs.gnu.org Received: via spool by 24490-submit@debbugs.gnu.org id=B24490.162628486528024 (code B ref 24490); Wed, 14 Jul 2021 17:48:02 +0000 Received: (at 24490) by debbugs.gnu.org; 14 Jul 2021 17:47:45 +0000 Received: from localhost ([127.0.0.1]:45893 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m3iz3-0007Hw-E2 for submit@debbugs.gnu.org; Wed, 14 Jul 2021 13:47:45 -0400 Received: from mail-qk1-f169.google.com ([209.85.222.169]:43763) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m3iz2-0007Hk-3h for 24490@debbugs.gnu.org; Wed, 14 Jul 2021 13:47:44 -0400 Received: by mail-qk1-f169.google.com with SMTP id m3so2407047qkm.10 for <24490@debbugs.gnu.org>; Wed, 14 Jul 2021 10:47:44 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=fitzsim-org.20150623.gappssmtp.com; s=20150623; h=from:to:cc:subject:references:date:in-reply-to:message-id :user-agent:mime-version; bh=iepMb502Ghy17mVzwJUQtqmNMcYk2Df7cKysjzky3rg=; b=qxfHeJmlJvxLI95Fyoe3SKmy/pro1Nrqc1KTsGZ4fstBC1pZp8uoprNicSshI13kom dQRIKSkXDgTiC141Ux9t1UqwmAnfCLFYy3XUnIw5VjdRYHSgKlcTbdWsaMqvBNdYqNO7 Yq0yyf6kVesF2RgCEd7ZY0MoVGSTFIwiue0S0zalI3dtUvXIq0Itn973yjF3XMw2dQh0 O2uoK+9S3zuw5jUDeBTvx/l1RzdQ5XYasj9ZAskk2ReXwVmshdyczl+n25/ylBhUyJRi 8EWo/UMWaMLvSNi5nFv9xOFjPNzPTtbfpP0lOR8XMdpL0aeUQovjVsnYE4p++PPLEko1 R8Cg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:to:cc:subject:references:date:in-reply-to :message-id:user-agent:mime-version; bh=iepMb502Ghy17mVzwJUQtqmNMcYk2Df7cKysjzky3rg=; b=QWGalX+QEZl80Ys09zCCyy/34cNWZOcasyWv5fHk7k0gUbkMV2VhDTAJ6Ab2UESfmU S7QqvZRQv7GCslAh8Z9DgC9FAVbDThLkusxhZBtKg/3yUHz+u0kW1pKdRkQjByXoBCY0 estDnhfv84yu7jDfgkEnKVbBgjDSxw9SvGcOSIMPW26hDffj7bhlvRa/xc30mHjk7vbp pbTrZ16ZNOXl1/r8Dd9monjCEUHGMHDrzUv567YtxYmBunmgflm4yqqvUVMF8LEhqHLg pbChluPORydwl+AcJSRZD14pXSpODxRrraS91QcRfsQjjpobvGMNAFOT9Dp6f1EHgWfi qptg== X-Gm-Message-State: AOAM531W/AZhhtpaqqNp1lo9qgpUvi0uZU4CBd9mlSU7UGwiLHEVv4Mt cXr31Ttj1mWr2FiqI2y+0so9tLFhql12oj6MdDs= X-Google-Smtp-Source: ABdhPJxCLbgRwfSsJKGZatqTVjVj0bsWuD+hSyaglxbjw0Vzs0i56DiiALCYY02PJSFzmqsu4JBSTg== X-Received: by 2002:a05:620a:130e:: with SMTP id o14mr2593326qkj.254.1626284858213; Wed, 14 Jul 2021 10:47:38 -0700 (PDT) Received: from localhost.localdomain (69-165-165-189.dsl.teksavvy.com. [69.165.165.189]) by smtp.gmail.com with ESMTPSA id s81sm1303802qka.82.2021.07.14.10.47.37 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Wed, 14 Jul 2021 10:47:37 -0700 (PDT) From: Thomas Fitzsimmons References: <87sg0rphvj.fsf@gnus.org> Date: Wed, 14 Jul 2021 13:47:36 -0400 In-Reply-To: (Thomas Fitzsimmons's message of "Thu, 08 Jul 2021 17:34:19 -0400") Message-ID: User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Score: 0.0 (/) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -1.0 (-) Thomas Fitzsimmons writes: > Lars Ingebrigtsen writes: > >> Alain Picard writes: >> >>> Dear Maintainers, >>> >>> In emacs 25.1, >>> the code in url-http.el, line 638, states: >>> >>> ;; Do not automatically include an authorization header in the >>> ;; redirect. If needed it will be regenerated by the relevant >>> ;; auth scheme when the new request happens. >>> (setq url-http-extra-headers >>> (cl-remove "Authorization" >>> url-http-extra-headers :key 'car :test 'equal)) >>> >>> I suspect this automatic regenration does not occur. >> >> I think this code is basically correct -- if the auth scheme has added >> something to url-http-extra-headers, then that has to be removed when >> doing the redirect, because otherwise we might be sending the auth to a >> completely wrong server, with the security implications of that. >> >>> Problem: I am using restclient.el, and hitting a server which >>> issues a redirect, and I receive a 400 Forbidden response because >>> the redirected call does not receive the authentication header >>> (I can see this from the log of my server). >> >> I think this must be a bug in restclient.el -- it should instead use an >> auth scheme that re-adds the Authorization header. > > It looks like restclient.el uses advice to skip > url-http-handle-authentication if it (restclient) is in the middle of a > request. > > Alain, to rule out that advice as being responsible, can you do: > > M-: (ad-deactivate 'url-http-handle-authentication) > > then try the API call again? The email to "alain@gocatch.com" bounced, so I think we should probably close this bug report. Thomas From unknown Mon Aug 18 17:57:58 2025 X-Loop: help-debbugs@gnu.org Subject: bug#24490: 25.1; restclient no longer sends auth header upon redirect Resent-From: Lars Ingebrigtsen Original-Sender: "Debbugs-submit" Resent-CC: bug-gnu-emacs@gnu.org Resent-Date: Wed, 14 Jul 2021 18:24:01 +0000 Resent-Message-ID: Resent-Sender: help-debbugs@gnu.org X-GNU-PR-Message: followup 24490 X-GNU-PR-Package: emacs X-GNU-PR-Keywords: moreinfo To: Thomas Fitzsimmons Cc: Alain Picard , 24490@debbugs.gnu.org Received: via spool by 24490-submit@debbugs.gnu.org id=B24490.162628703831370 (code B ref 24490); Wed, 14 Jul 2021 18:24:01 +0000 Received: (at 24490) by debbugs.gnu.org; 14 Jul 2021 18:23:58 +0000 Received: from localhost ([127.0.0.1]:45937 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m3jY5-00089u-Tv for submit@debbugs.gnu.org; Wed, 14 Jul 2021 14:23:58 -0400 Received: from quimby.gnus.org ([95.216.78.240]:46618) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m3jY4-00089b-3V for 24490@debbugs.gnu.org; Wed, 14 Jul 2021 14:23:56 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Content-Type:MIME-Version:Message-ID:In-Reply-To:Date: References:Subject:Cc:To:From:Sender:Reply-To:Content-Transfer-Encoding: Content-ID:Content-Description:Resent-Date:Resent-From:Resent-Sender: Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=+zNl76j5AWgdpOrhzKOdf2ppny8dUfYhwVa8H6fwShg=; b=kAHgJsYteLlhLYEMochSEzpjFg hq/YeIsXx/D2JAH3+VR9PgZWNGAmHpgbDVP+DgfZ5vkrsUI29hPxgGXjQeFHdGxLhPQisssJXc7uC M8YlrfolXYy7gpatHfdWCj9r39XW5MgZ24BT7zezXgTeGU7LfXMeMAVB+5tRvvVO7WyU=; Received: from cm-84.212.220.105.getinternet.no ([84.212.220.105] helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1m3jXu-0006wm-AH; Wed, 14 Jul 2021 20:23:48 +0200 From: Lars Ingebrigtsen References: <87sg0rphvj.fsf@gnus.org> Face: iVBORw0KGgoAAAANSUhEUgAAADAAAAAwBAMAAAClLOS0AAAABGdBTUEAALGPC/xhBQAAACBj SFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAAG1BMVEX+/v7g2NFmcofZ wqA5LCi1aDrUlFTjmVP///9i1ZzXAAAAAWJLR0QIht6VegAAAAd0SU1FB+UHDhIXJP6AnOsAAAF5 SURBVDjLjdPNbsIwDADgFhi70hWx69h4AFhhXBm4cAe7uU6ChAeAxK8/M36U0CAtUnvwVzuJkyZJ fKTJP+DlfRSFFgC8xZLHAvNYUSAE+KlDazVljNXqfhRxGGwPAt+RuTUdo8vq2uUOYFaHpykfKZbR PPDuESDCMAJsEfqdOjSUwDACzZJ38YxSy8ajGRaiGVLqwRxL1lCLp1nSrgQWRTEK4o6Us5XByizJ 3+Mza2JDTmmjtN/5HluqtCZNpOw8AEenYQjl7dVqM5MzAkZXtPWgyXxUxuyl2ibP+sGqaGUNVxo3 We6dSUqEpdvKqkhln/5hKWZw7mDFNz6kzA6VJVqXdj7woE0CS03VGjC4vxPaO6rkwbuLPV4p3p82 CXfQE7jGSx+yqbnG7yCfSn/xL64XHuTZqzrXkR76bU9HhT59L+0lDP6EPP86xaUe4Sw42yJH2qEk EPqtkpQJntdEGN6UBtzGpcYFWtfwdyeEwQ2SAFJ4AI06/AImQYly/IYLhAAAACV0RVh0ZGF0ZTpj cmVhdGUAMjAyMS0wNy0xNFQxODoyMzozNiswMDowMJsVDL0AAAAldEVYdGRhdGU6bW9kaWZ5ADIw MjEtMDctMTRUMTg6MjM6MzYrMDA6MDDqSLQBAAAAAElFTkSuQmCC X-Now-Playing: Neneh Cherry's _Raw Like Sushi (1)_: "So Here I Come" Date: Wed, 14 Jul 2021 20:23:45 +0200 In-Reply-To: (Thomas Fitzsimmons's message of "Wed, 14 Jul 2021 13:47:36 -0400") Message-ID: <87mtqodaa6.fsf@gnus.org> User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/28.0.50 (gnu/linux) MIME-Version: 1.0 Content-Type: text/plain X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: Thomas Fitzsimmons writes: > The email to "alain@gocatch.com" bounced, so I think we should probably > close this bug report. OK; done. Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) Thomas Fitzsimmons writes: > The email to "alain@gocatch.com" bounced, so I think we should probably > close this bug report. OK; done. -- (domestic pets only, the antidote for overdose, milk.) bloggy blog: http://lars.ingebrigtsen.no From debbugs-submit-bounces@debbugs.gnu.org Wed Jul 14 14:24:07 2021 Received: (at control) by debbugs.gnu.org; 14 Jul 2021 18:24:07 +0000 Received: from localhost ([127.0.0.1]:45941 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m3jYF-0008Af-4g for submit@debbugs.gnu.org; Wed, 14 Jul 2021 14:24:07 -0400 Received: from quimby.gnus.org ([95.216.78.240]:46634) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1m3jYD-0008A3-7x for control@debbugs.gnu.org; Wed, 14 Jul 2021 14:24:05 -0400 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=gnus.org; s=20200322; h=Subject:From:To:Message-Id:Date:Sender:Reply-To:Cc: MIME-Version:Content-Type:Content-Transfer-Encoding:Content-ID: Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc :Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe: List-Subscribe:List-Post:List-Owner:List-Archive; bh=sV+ahMH6+b6aVQXkYYVjjnBTReEbRbrwTQRT8L8Iv+0=; b=YPQhK2zn9PMF1UjKEnueGkUBRJ 56gExlBz60ymHtVCMXPFeZfUvdNikxkG0NOP+e9hasGKUFrW6on+LCI4/TguUCCblzd47yHWpGPh4 /hfdbpqTGZoNHk63A8Qcrr4uoMGdOOjA8IfSFu+sj1oaiaYaI13EL4XmQM7qaaB5z2kE=; Received: from cm-84.212.220.105.getinternet.no ([84.212.220.105] helo=elva) by quimby.gnus.org with esmtpsa (TLS1.3:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.92) (envelope-from ) id 1m3jY5-0006x4-LN for control@debbugs.gnu.org; Wed, 14 Jul 2021 20:23:59 +0200 Date: Wed, 14 Jul 2021 20:23:57 +0200 Message-Id: <87lf68da9u.fsf@gnus.org> To: control@debbugs.gnu.org From: Lars Ingebrigtsen Subject: control message for bug #24490 X-Spam-Report: Spam detection software, running on the system "quimby.gnus.org", has NOT identified this incoming email as spam. The original message has been attached to this so you can view it or label similar future email. If you have any questions, see @@CONTACT_ADDRESS@@ for details. Content preview: close 24490 quit Content analysis details: (-2.9 points, 5.0 required) pts rule name description ---- ---------------------- -------------------------------------------------- -1.0 ALL_TRUSTED Passed through trusted hosts only via SMTP -1.9 BAYES_00 BODY: Bayes spam probability is 0 to 1% [score: 0.0000] X-Spam-Score: -2.3 (--) X-Debbugs-Envelope-To: control X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -3.3 (---) close 24490 quit