[jboss-jira] [JBoss JIRA] (WFLY-8463) Elytron, misconfiguration of http-authentication-factory leads to 403 - should be 500

Martin Choma (JIRA) issues at jboss.org
Wed Mar 29 04:37:00 EDT 2017


Martin Choma created WFLY-8463:
----------------------------------

             Summary: Elytron, misconfiguration of http-authentication-factory leads to 403 - should be 500
                 Key: WFLY-8463
                 URL: https://issues.jboss.org/browse/WFLY-8463
             Project: WildFly
          Issue Type: Bug
          Components: Security
            Reporter: Martin Choma
            Assignee: Darran Lofthouse


When I misconfigured {{http-authentication-factory}, e.g. with unreal protocol "DOES_NOT_EXIST" I get http status code 403.

I think 500 would be more appropriate here, as server is misconfigured and can't authenticate.
403 means user has not appropriate roles.



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)


More information about the jboss-jira mailing list