Pkg.update caches invalid credentials

[omus]

After purposefully entering my username and password incorrectly three times for private repo I got the expected "Package ... cannot be updated." message. What I did not expect is that running Pkg.update() again does not reprompt the user for credentials.

[StefanKarpinski]

Does it just decide that you don't know them and stop asking you forever?

[Keno]

What version was this on. I did a bit of cleanup of this code in the past two days.

[omus]

OS X Julia v0.5.0-rc2.

[omus]

I just tried Julia v0.5.0-rc2 on Linux and it appears to reprompt forever when given invalid credentials. Also, I forgot to mention this using HTTP.

[omus]

As it turns out our private Git server will block access when entering invalid credentials repeatedly within a short duration of time. Once blocked, Julia will then cache the last invalid credentials and use them on subsequent Pkg.update() calls.

[KristofferC]

Issue moved to JuliaLang/Pkg.jl #692 via ZenHub