[jboss-jira] [JBoss JIRA] (WFLY-10894) [WFLY] enable constraint drive authentication mode for elytron
[
https://issues.jboss.org/browse/WFLY-10894?page=com.atlassian.jira.plugin...
]
Bartosz Spyrko-Śmietanko moved JBEAP-15288 to WFLY-10894:
---------------------------------------------------------
Project: WildFly (was: JBoss Enterprise Application Platform)
Key: WFLY-10894 (was: JBEAP-15288)
Workflow: GIT Pull Request workflow (was: CDW with loose statuses v1)
Component/s: Security
Web (Undertow)
(was: Security)
(was: Web (Undertow))
Affects Version/s: (was: 7.1.3.GA)
Fix Version/s: (was: 7.1.5.GA)
[WFLY] enable constraint drive authentication mode for elytron
--------------------------------------------------------------
Key: WFLY-10894
URL: https://issues.jboss.org/browse/WFLY-10894
Project: WildFly
Issue Type: Bug
Components: Security, Web (Undertow)
Reporter: Bartosz Spyrko-Śmietanko
Assignee: Bartosz Spyrko-Śmietanko
Labels: test_included
Integration code for JBEAP-15054
----
When elytron is enabled constraint driven authentication method (i.e.
proactive-authentication=false) has no effect.
If you try to request an unsecured page sending in an invalid user with basic
authentication, you should get the page returned with constraint drive authentication and
a 401 with proactive authentication. This is what happens without Elytron enabled. But
if you enable Elytron it gives a 401 in both cases.
--
This message was sent by Atlassian JIRA
(v7.5.0#75005)