[jboss-jira] [JBoss JIRA] (AS7-4646) Management Console needs to support FORM authentication

[Jess Sightler (JIRA)]

     [ https://issues.jboss.org/browse/AS7-4646?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jess Sightler updated AS7-4646:
-------------------------------

            Issue Type: Feature Request  (was: Bug)
                Labels: security  (was: )
      Git Pull Request:   (was: https://github.com/jbossas/jboss-as/pull/2139)
           Description: Many clients have security requirements that disallow HTTP Basic authentication. HTTP Digest is also disallowed due to the requirement to store plaintext passwords on the server. HTTP Form based authentication would provide a much smoother experience for users and comply with client requirements.  (was: Original code is:
String referrer = responseHeaders.getFirst("Referrer");

But the HTTP Referer header is actually spelled "Referer". Pull request with fix is here:
https://github.com/jbossas/jboss-as/pull/2139
)
           Component/s: Console
                            (was: Domain Management)
    Steps to Reproduce:   (was: Mod_proxy requests from a client using HTTPS (but with the proxy requests over HTTP).)

    
> Management Console needs to support FORM authentication
> -------------------------------------------------------
>
>                 Key: AS7-4646
>                 URL: https://issues.jboss.org/browse/AS7-4646
>             Project: Application Server 7
>          Issue Type: Feature Request
>          Components: Console
>            Reporter: Jess Sightler
>            Assignee: Jason Greene
>              Labels: security
>
> Many clients have security requirements that disallow HTTP Basic authentication. HTTP Digest is also disallowed due to the requirement to store plaintext passwords on the server. HTTP Form based authentication would provide a much smoother experience for users and comply with client requirements.

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators: https://issues.jboss.org/secure/ContactAdministrators!default.jspa
For more information on JIRA, see: http://www.atlassian.com/software/jira