[shrinkwrap-issues] [JBoss JIRA] (SHRINKWRAP-385) Bad implementation of AuthStaticFileHandler leads to false positive

Carlo de Wolf (JIRA) jira-events at lists.jboss.org
Wed Feb 8 13:10:49 EST 2012


     [ https://issues.jboss.org/browse/SHRINKWRAP-385?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Carlo de Wolf updated SHRINKWRAP-385:
-------------------------------------

              Status: Pull Request Sent  (was: Open)
    Git Pull Request: https://github.com/shrinkwrap/resolver/pull/13

    
> Bad implementation of AuthStaticFileHandler leads to false positive
> -------------------------------------------------------------------
>
>                 Key: SHRINKWRAP-385
>                 URL: https://issues.jboss.org/browse/SHRINKWRAP-385
>             Project: ShrinkWrap
>          Issue Type: Bug
>          Components: ext-resolver
>            Reporter: Carlo de Wolf
>            Assignee: Carlo de Wolf
>             Fix For: resolver-2.0.0-alpha-1
>
>
> For some reason wagon 2.0 ignores the return code and since the original AuthStaticFileHandler would return the static file regardless the test would pass. Switching back to wagon 1.0-beta-7 (which comes with Maven 3.0.3) exposes this problem as it does abide the return code.
> Given http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2 it is clear that the handler is implementing authentication incorrectly since it must include a WWW-Authenticate header field in the response.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira

        


More information about the shrinkwrap-issues mailing list