]
Jan Kalina moved WFLY-8471 to WFCORE-2653:
------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2653 (was: WFLY-8471)
Component/s: Security
(was: Security)
Elytron, *-authentication-factory protocol attribute should be case
insensitive
-------------------------------------------------------------------------------
Key: WFCORE-2653
URL:
https://issues.jboss.org/browse/WFCORE-2653
Project: WildFly Core
Issue Type: Bug
Components: Security
Reporter: Martin Choma
Assignee: Jan Kalina
Priority: Blocker
When I use "HTTP" in protocol attribute instead of "http", I get 403
instead of succesfull access.
According to
http://www.rfc-base.org/txt/rfc-1738.txt
Scheme names consist of a sequence of characters. The lower case
letters "a"--"z", digits, and the characters plus ("+"),
period
("."), and hyphen ("-") are allowed. For resiliency, programs
interpreting URLs should treat upper case letters as equivalent to
lower case in scheme names (e.g., allow "HTTP" as well as "http").