[jboss-jira] [JBoss JIRA] (WFCORE-2653) Elytron, *-authentication-factory protocol attribute should be case insensitive
Jan Kalina (JIRA)
issues at jboss.org
Mon Apr 10 12:34:00 EDT 2017
[ https://issues.jboss.org/browse/WFCORE-2653?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jan Kalina moved WFLY-8471 to WFCORE-2653:
------------------------------------------
Project: WildFly Core (was: WildFly)
Key: WFCORE-2653 (was: WFLY-8471)
Component/s: Security
(was: Security)
> Elytron, *-authentication-factory protocol attribute should be case insensitive
> -------------------------------------------------------------------------------
>
> Key: WFCORE-2653
> URL: https://issues.jboss.org/browse/WFCORE-2653
> Project: WildFly Core
> Issue Type: Bug
> Components: Security
> Reporter: Martin Choma
> Assignee: Jan Kalina
> Priority: Blocker
>
> When I use "HTTP" in protocol attribute instead of "http", I get 403 instead of succesfull access.
> According to http://www.rfc-base.org/txt/rfc-1738.txt
> Scheme names consist of a sequence of characters. The lower case
> letters "a"--"z", digits, and the characters plus ("+"), period
> ("."), and hyphen ("-") are allowed. For resiliency, programs
> interpreting URLs should treat upper case letters as equivalent to
> lower case in scheme names (e.g., allow "HTTP" as well as "http").
--
This message was sent by Atlassian JIRA
(v7.2.3#72005)
More information about the jboss-jira
mailing list