[JBoss JIRA] (ELY-1963) Silent Basic let me access resource without credential
- First Post
- Replies
- Stats
-
Go to
- ----- 2026 -----
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
[
https://issues.redhat.com/browse/ELY-1963?page=com.atlassian.jira.plugin....
]
Martin Choma edited comment on ELY-1963 at 9/18/20 9:01 AM:
------------------------------------------------------------
Zulip link does not show to me neither. There use to be eap specific stream which was
moved to Google Chat I believe thats why we cant see it anymore.
When I look here [1], I believe it is testing mentioned scenario. Test seems correct. So I
believe this issue is not valid anymore.
[1]
https://github.com/wildfly/wildfly/blob/b6af74655a157c08c8e1b3014db09874c...
was (Author: mchoma):
Zulip link does not show to me neither. There use to be eap specific stream which was
moved to Google Chat I believe thats why we cant see it anymore.
When I look here, I believe it is testing mentioned scenario. Test seems correct. So I
believe this issue is not valid anymore.
[1]
https://github.com/wildfly/wildfly/blob/b6af74655a157c08c8e1b3014db09874c...
Silent Basic let me access resource without credential
------------------------------------------------------
Key: ELY-1963
URL: https://issues.redhat.com/browse/ELY-1963
Project: WildFly Elytron
Issue Type: Bug
Components: HTTP
Reporter: Martin Choma
Assignee: Diana Vilkolakova
Priority: Major
Attachments: SilentBasicMechTestCase-web.xml
I use this configuration in web.xml
{{<auth-method>BASIC?silent=true,FORM</auth-method>}} and I get 200 + content
of protected resource when I access resource without credentials.
If I use this configuration in web.xml
{{<auth-method>BASIC?silent=true</auth-method>}} I get correctly empty content
with 200 status code when I access without credentials.
Zulip Chat 2019-01-04:
https://wildfly.zulipchat.com/#narrow/stream/174178-eap/subject/EAP7-1154...
Test Commit:
https://github.com/mchoma/wildfly/commit/e191c211c7e224f835c933c31829e597...
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
2032
days inactive
2032
days old
0 comments
1 participants
tags (0)
participants (1)
-
Martin Choma (Jira)