Martin Choma created WFLY-8471: ---------------------------------- Summary: Elytron, *-authentication-factory protocol attribute should be case insensitive Key: WFLY-8471 URL: https://issues.jboss.org/browse/WFLY-8471 Project: WildFly Issue Type: Bug Components: Security Reporter: Martin Choma Assignee: Darran Lofthouse Priority: Blocker When I use "HTTP" in protocol attribute instead of "http", I get 403 instead of succesfull access. According to http://www.rfc-base.org/txt/rfc-1738.txt Scheme names consist of a sequence of characters. The lower case    letters "a"--"z", digits, and the characters plus ("+"), period    ("."), and hyphen ("-") are allowed. For resiliency, programs    interpreting URLs should treat upper case letters as equivalent to    lower case in scheme names (e.g., allow "HTTP" as well as "http"). -- This message was sent by Atlassian JIRA (v7.2.3#72005)