Security has been added to drools-guvnor.
We want to access guvnor packages from drools-server in https mode, but it seems that there is nothing simple done to add username/password in the request.

The org.drools.agent.HttpClientImpl class contains 2 methods : checkLastUpdated and fetchPackage which use java.net.HttpURLConnection class for remote connection.
This HttpClientImpl class is an attribute of the org.drools.agent.URLScanner class :
"IHttpClient httpClient = new HttpClientImpl();"

If I want to add authentification information to the HttpURLConnection object, I have to extend the HttpClientImpl class, and URLScanner class and org.drools.agent.RuleAgent and org.drools.server.KnowledgeStatelessServlet...

Is there a simple way to add authentification without having to extend all these classes ?

Thanks