<div dir="ltr">Hi,<br><div class="gmail_extra"><br><div class="gmail_quote">On Thu, Dec 24, 2015 at 2:00 AM, Stuart Douglas <span dir="ltr"><<a href="mailto:sdouglas@redhat.com" target="_blank">sdouglas@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">Looks like I made a mistake in the JIRA, it should already be in Wildfly. Can you test it out?<br></blockquote><div><br></div><div>I just did the check again and lo and behold, the fix is indeed already there. I'm not really sure what went wrong with my quick test the other day but it clearly works now. Double checked the source of undertow-servlet-1.3.11.Final and the fix is really there, so this is absolutely great. Thanks again!</div><div><br></div><div>One question about the commit though, when it was committed here: <a href="https://github.com/undertow-io/undertow/commit/6e9663576fcaaa14f5a9cedf4ae1a144b20fd09e">https://github.com/undertow-io/undertow/commit/6e9663576fcaaa14f5a9cedf4ae1a144b20fd09e</a></div><div><br></div><div>It was committed in the master, but master was already 1.4.x at Nov 6, or did I miss something here? Doesn't matter much for the end result but just curious.</div><div><br></div><div>Kind regards,</div><div>Arjan Tijms</div><div><br></div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<br>
Stuart<br>
<div><div class="h5"><br>
----- Original Message -----<br>
> From: "arjan tijms" <<a href="mailto:arjan.tijms@gmail.com">arjan.tijms@gmail.com</a>><br>
> To: "undertow-dev" <<a href="mailto:undertow-dev@lists.jboss.org">undertow-dev@lists.jboss.org</a>><br>
> Sent: Wednesday, 23 December, 2015 11:24:57 PM<br>
> Subject: [undertow-dev] UNDERTOW-577 - response code from SAM<br>
><br>
> Hi,<br>
><br>
> I wonder if it would make sense to port the (small) fix for UNDERTOW-577 back<br>
> to Undertow 1.3.x, and hopefully still include this with WF 10 final.<br>
><br>
> This concerns one of the last (known) larger bugs with JASPIC in WildFly.<br>
> Without this being fixed, something like the 403 or 404 from a SAM is not<br>
> possible, Returning a 403 is specifically needed for the BASIC scheme.<br>
><br>
> For instance, the following JSR 375 authentication mechanism now works on<br>
> GlassFish, but throws a "UT010019: Response already commited" on WildFly<br>
> 10rc4/Undertow 1.3.11:<br>
><br>
> public AuthStatus validateRequest(HttpServletRequest request,<br>
> HttpServletResponse response, HttpMsgContext httpMsgContext) throws<br>
> AuthException {<br>
> String[] credentials = getCredentials(request);<br>
> if (!isEmpty(credentials)) {<br>
> IdentityStore identityStore =<br>
> CDI.current().select(IdentityStore.class).get();<br>
> CredentialValidationResult result = identityStore.validate(<br>
> new UsernamePasswordCredential(credentials[0], new<br>
> Password(credentials[1])));<br>
><br>
> if (result.getStatus() == VALID) {<br>
> return httpMsgContext.notifyContainerAboutLogin(<br>
> result.getCallerName(), result.getCallerGroups());<br>
> }<br>
> }<br>
> if (httpMsgContext.isProtected()) {<br>
> response.setHeader("WWW-Authenticate", basicHeaderValue);<br>
> return httpMsgContext.responseUnAuthorized();<br>
> }<br>
> return httpMsgContext.doNothing();<br>
> }<br>
><br>
> The problem is the "httpMsgContext.responseUnAuthorized();" which does:<br>
><br>
> try {<br>
> getResponse().sendError(SC_UNAUTHORIZED);<br>
> } catch (IOException e) {<br>
> throw new IllegalStateException(e);<br>
> }<br>
> return SEND_FAILURE;<br>
><br>
> I'm not really sure what the schedule is for Undertow 1.4 vs a potential WF<br>
> 11 and/or EAP 7. If WF 11 is still far away and EAP 7 will be based on WF<br>
> 10, then it would really be great if this small but rather important fix<br>
> could still be included in WF 10.<br>
><br>
> Kind regards,<br>
> Arjan Tijms<br>
><br>
><br>
><br>
><br>
><br>
><br>
</div></div>> _______________________________________________<br>
> undertow-dev mailing list<br>
> <a href="mailto:undertow-dev@lists.jboss.org">undertow-dev@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/undertow-dev" rel="noreferrer" target="_blank">https://lists.jboss.org/mailman/listinfo/undertow-dev</a><br>
</blockquote></div><br></div></div>