[jboss-jira] [JBoss JIRA] (WFLY-8848) AUTH feature - plain tokes does case-insensitive comparison of shared secrets
[
https://issues.jboss.org/browse/WFLY-8848?page=com.atlassian.jira.plugin....
]
Paul Ferraro moved JBEAP-11169 to WFLY-8848:
--------------------------------------------
Project: WildFly (was: JBoss Enterprise Application Platform)
Key: WFLY-8848 (was: JBEAP-11169)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Clustering
(was: Clustering)
Affects Version/s: No Release
(was: 7.1.0.DR18)
AUTH feature - plain tokes does case-insensitive comparison of shared
secrets
-----------------------------------------------------------------------------
Key: WFLY-8848
URL: https://issues.jboss.org/browse/WFLY-8848
Project: WildFly
Issue Type: Bug
Components: Clustering
Affects Versions: No Release
Reporter: Paul Ferraro
Assignee: Paul Ferraro
The same approach is used for a digest token (MD5 or SHA algorithm), where it is not a
problem due to converting the shared secret to HEX prior doing case-insensitive compare.
It is however a problem for a plain token.
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)