From dee8d4f41030c3d463bd7d871cdb950293c124ca Mon Sep 17 00:00:00 2001
From: ByteHamster <info@bytehamster.com>
Date: Tue, 4 Jan 2022 16:22:05 +0100
Subject: Fix streaming password protected media with http redirect

---
 .../service/BasicAuthorizationInterceptor.java     | 25 ++++++++++++++++------
 1 file changed, 18 insertions(+), 7 deletions(-)

(limited to 'core/src/main')

diff --git a/core/src/main/java/de/danoeh/antennapod/core/service/BasicAuthorizationInterceptor.java b/core/src/main/java/de/danoeh/antennapod/core/service/BasicAuthorizationInterceptor.java
index a2facae64..667d6afeb 100644
--- a/core/src/main/java/de/danoeh/antennapod/core/service/BasicAuthorizationInterceptor.java
+++ b/core/src/main/java/de/danoeh/antennapod/core/service/BasicAuthorizationInterceptor.java
@@ -9,12 +9,15 @@ import de.danoeh.antennapod.core.storage.DBReader;
 import de.danoeh.antennapod.core.util.URIUtil;
 import java.io.IOException;
 import java.net.HttpURLConnection;
+import java.util.List;
+
 import okhttp3.Interceptor;
 import okhttp3.Request;
 import okhttp3.Response;
 
 public class BasicAuthorizationInterceptor implements Interceptor {
     private static final String TAG = "BasicAuthInterceptor";
+    private static final String HEADER_AUTHORIZATION = "Authorization";
 
     @Override
     @NonNull
@@ -27,6 +30,19 @@ public class BasicAuthorizationInterceptor implements Interceptor {
             return response;
         }
 
+        Request.Builder newRequest = request.newBuilder();
+        if (!TextUtils.equals(response.request().url().toString(), request.url().toString())) {
+            // Redirect detected. OkHTTP does not re-add the headers on redirect, so calling the new location directly.
+            newRequest.url(response.request().url());
+
+            List<String> authorizationHeaders = request.headers().values(HEADER_AUTHORIZATION);
+            if (!authorizationHeaders.isEmpty() && !TextUtils.isEmpty(authorizationHeaders.get(0))) {
+                // Call already had authorization headers. Try again with the same credentials.
+                newRequest.header(HEADER_AUTHORIZATION, authorizationHeaders.get(0));
+                return chain.proceed(newRequest.build());
+            }
+        }
+
         String userInfo;
         if (request.tag() instanceof DownloadRequest) {
             DownloadRequest downloadRequest = (DownloadRequest) request.tag();
@@ -49,14 +65,9 @@ public class BasicAuthorizationInterceptor implements Interceptor {
             return response;
         }
 
-        Request.Builder newRequest = request.newBuilder();
-        if (!TextUtils.equals(response.request().url().toString(), request.url().toString())) {
-            newRequest.url(response.request().url());
-        }
-
         Log.d(TAG, "Authorization failed, re-trying with ISO-8859-1 encoded credentials");
         String credentials = HttpDownloader.encodeCredentials(parts[0], parts[1], "ISO-8859-1");
-        newRequest.header("Authorization", credentials);
+        newRequest.header(HEADER_AUTHORIZATION, credentials);
         response = chain.proceed(newRequest.build());
 
         if (response.code() != HttpURLConnection.HTTP_UNAUTHORIZED) {
@@ -65,7 +76,7 @@ public class BasicAuthorizationInterceptor implements Interceptor {
 
         Log.d(TAG, "Authorization failed, re-trying with UTF-8 encoded credentials");
         credentials = HttpDownloader.encodeCredentials(parts[0], parts[1], "UTF-8");
-        newRequest.header("Authorization", credentials);
+        newRequest.header(HEADER_AUTHORIZATION, credentials);
         return chain.proceed(newRequest.build());
     }
 }
-- 
cgit v1.2.3