[jboss-jira] [JBoss JIRA] (SECURITY-793) Add support to fall back to BASIC authentication.

[Darran Lofthouse (JIRA)]

    [ https://issues.jboss.org/browse/SECURITY-793?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12944380#comment-12944380 ] 

Darran Lofthouse commented on SECURITY-793:
-------------------------------------------

There is a limit regarding how far we can go implementing this feature - we can pro-actively send the BASIC auth challenge early, we can also send the BASIC challenge if we do not like the response type from the browser but one thing that we can not do is stop the web browser from sending us an NTLM response - this does mean in some cases the end user may be asked twice for their username and password.
                
> Add support to fall back to BASIC authentication.
> -------------------------------------------------
>
>                 Key: SECURITY-793
>                 URL: https://issues.jboss.org/browse/SECURITY-793
>             Project: PicketBox 
>          Issue Type: Task
>      Security Level: Public(Everyone can see) 
>          Components: Negotiation
>            Reporter: Darran Lofthouse
>            Assignee: Darran Lofthouse
>             Fix For: Negotiation_2_1_5
>
>


--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira