[shrinkwrap-issues] [JBoss JIRA] (SHRINKWRAP-385) Bad implementation of AuthStaticFileHandler leads to false positive

[Karel Piwko (JIRA)]

     [ https://issues.jboss.org/browse/SHRINKWRAP-385?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Karel Piwko updated SHRINKWRAP-385:
-----------------------------------

        Status: Resolved  (was: Pull Request Sent)
    Resolution: Done


Pushed upstream in https://github.com/shrinkwrap/resolver/commit/3b731f2086ea8cddbba76aaeb069ba3126e6d807
                
> Bad implementation of AuthStaticFileHandler leads to false positive
> -------------------------------------------------------------------
>
>                 Key: SHRINKWRAP-385
>                 URL: https://issues.jboss.org/browse/SHRINKWRAP-385
>             Project: ShrinkWrap
>          Issue Type: Bug
>          Components: ext-resolver
>            Reporter: Carlo de Wolf
>            Assignee: Carlo de Wolf
>             Fix For: resolver-2.0.0-alpha-1
>
>
> For some reason wagon 2.0 ignores the return code and since the original AuthStaticFileHandler would return the static file regardless the test would pass. Switching back to wagon 1.0-beta-7 (which comes with Maven 3.0.3) exposes this problem as it does abide the return code.
> Given http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html#sec10.4.2 it is clear that the handler is implementing authentication incorrectly since it must include a WWW-Authenticate header field in the response.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira