[JBoss JIRA] (ELY-1963) Silent Basic let me access resource without credential
- First Post
- Replies
- Stats
-
Go to
- ----- 2026 -----
- June
- May
- April
- March
- February
- January
- ----- 2025 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2024 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2023 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2022 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2021 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2020 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2019 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2018 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2017 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2016 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2015 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2014 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2013 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2012 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2011 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2010 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2009 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2008 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2007 -----
- December
- November
- October
- September
- August
- July
- June
- May
- April
- March
- February
- January
- ----- 2006 -----
- December
- November
- October
- September
- August
- July
[
https://issues.redhat.com/browse/ELY-1963?page=com.atlassian.jira.plugin....
]
Diana Vilkolakova commented on ELY-1963:
----------------------------------------
Hello [~mchoma], the zulip chat link does not work for me. When
*<auth-method>BASIC?silent=true,FORM</auth-method>* is configured, and there
is no _Authorization_ header provided in the request, then the FORM authentication will
take place. The protected resource will be returned if the FORM authentication was
successful.
Silent Basic let me access resource without credential
------------------------------------------------------
Key: ELY-1963
URL: https://issues.redhat.com/browse/ELY-1963
Project: WildFly Elytron
Issue Type: Bug
Components: HTTP
Reporter: Martin Choma
Assignee: Diana Vilkolakova
Priority: Major
Attachments: SilentBasicMechTestCase-web.xml
I use this configuration in web.xml
{{<auth-method>BASIC?silent=true,FORM</auth-method>}} and I get 200 + content
of protected resource when I access resource without credentials.
If I use this configuration in web.xml
{{<auth-method>BASIC?silent=true</auth-method>}} I get correctly empty content
with 200 status code when I access without credentials.
Zulip Chat 2019-01-04:
https://wildfly.zulipchat.com/#narrow/stream/174178-eap/subject/EAP7-1154...
Test Commit:
https://github.com/mchoma/wildfly/commit/e191c211c7e224f835c933c31829e597...
--
This message was sent by Atlassian Jira
(v7.13.8#713008)
2102
days inactive
2102
days old
0 comments
1 participants
tags (0)
participants (1)
-
Diana Vilkolakova (Jira)