jcmturner / gokrb5

Pure Go Kerberos library for clients and services
Apache License 2.0
725 stars 248 forks source link

fix SPNEGO HTTP client redirect loop detection. #531

Open tzsebe opened 1 year ago

tzsebe commented 1 year ago

fixing the redirect loop detection logic in the SPNEGO HTTP client.

The client stored all redirect requests, and treated the lot of them as a single chain. In this change, we switch to allowing the redirect chain to travel along the recursion stack, so they are tracked on a per-request basis.

Fixes #530