OAK-12259: oak-http: OakServlet mis-parses HTTP Basic credentials - m…

[reschke]

…any many many tests.

EDIT: hint: this is a demo project. The PR fixes a ton of issues. The fixes have test coverage. There's a point where nitpicking on the test cases becomes a waste of time. Please only report major problems.

[github-actions]

Commit-Check ❌

Commit rejected by Commit-Check.                                  
                                                                  
  (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)    (c).-.(c)  
   / ._. \      / ._. \      / ._. \      / ._. \      / ._. \   
 __\( C )/__  __\( H )/__  __\( E )/__  __\( C )/__  __\( K )/__ 
(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)(_.-/'-'\-._)
   || E ||      || R ||      || R ||      || O ||      || R ||   
 _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._  _.' '-' '._ 
(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)(.-./`-´\.-.)
 `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´  `-´     `-´ 
                                                                  
Commit rejected.                                                  
                                                                  
Type message check failed ==> Update oak-http/src/test/java/org/apache/jackrabbit/oak/http/AuthorizationFieldTest.java

Co-authored-by: Rishabh Kumar <rishabhdaim1991@gmail.com> 
The commit message should follow Conventional Commits. See https://www.conventionalcommits.org
Suggest: Commit message does not match the required pattern

[rishabhdaim]

AI Review:

The production logic is correct — indexOf(':') properly handles colons in passwords, case-insensitive scheme match is right, and the AIOOBE→LoginException shift is the intended fix. Three test issues before merge.

nit: AuthorizationField.java:33 — new public method, AGENTS.md requires @NotNull/@Nullable annotations:

public static @NotNull SimpleCredentials valueOf(@NotNull Enumeration<String> values) throws LoginException

[rishabhdaim]

un-reachable code.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
100.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud