[jboss-jira] [JBoss JIRA] (SECURITY-799) Port the fallback to BASIC auth fix from branch security-negotiation-2.1.x

[Rafał Gała (JIRA)]

     [ https://issues.jboss.org/browse/SECURITY-799?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Rafał Gała updated SECURITY-799:
--------------------------------

    Attachment: NegotiationAuthenticator.java


Patched NegotiationAuthenticator.java from 2.3.0.Final with SECURITY-793 changes. Works fine in Chrome and Firefox. In Internet Explorer it acts strange. When I open application, IE displays basic auth username/password prompt where I can put whatever I want (it does not matter) and just after it displays login form or basic auth window (depending on web.xml configuration) again which can finally be used to log in. Why is IE acting so strange?
                
> Port the fallback to BASIC auth fix from branch security-negotiation-2.1.x
> --------------------------------------------------------------------------
>
>                 Key: SECURITY-799
>                 URL: https://issues.jboss.org/browse/SECURITY-799
>             Project: PicketBox 
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>            Priority: Blocker
>             Fix For: Negotiation_2_2_8
>
>         Attachments: NegotiationAuthenticator.java
>
>
> The following two commits need to be pulled to master before 2.2.8 is tagged.
> https://github.com/wildfly/jboss-negotiation/commit/3a9ca05459edd6e4d3f3761d5ccb80c5be11f964
> https://github.com/wildfly/jboss-negotiation/commit/6edd2b0d30ff578bc3197daa86ee1e3142105f68

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira