[jboss-jira] [JBoss JIRA] (WFLY-8463) Elytron, misconfiguration of http-authentication-factory leads to 403 - should be 500

[Martin Choma (JIRA)]

     [ https://issues.jboss.org/browse/WFLY-8463?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Martin Choma updated WFLY-8463:
-------------------------------
    Description: 
When I misconfigured {{http-authentication-factory}}, e.g. with unreal protocol "DOES_NOT_EXIST" I get http status code 403.

I think 500 would be more appropriate here, as server is misconfigured and can't authenticate.
403 means user has not appropriate roles.

In log there is
{code}
10:08:06,309 TRACE [org.wildfly.security] (management task-6) java.lang.IllegalStateException: ELY01119: Unable to resolve MechanismConfiguration for mechanismType='HTTP', mechanismName='SPNEGO', hostName='localhost.localdomain', protocol='http'.
{code}

  was:
When I misconfigured {{http-authentication-factory}, e.g. with unreal protocol "DOES_NOT_EXIST" I get http status code 403.

I think 500 would be more appropriate here, as server is misconfigured and can't authenticate.
403 means user has not appropriate roles.



> Elytron, misconfiguration of http-authentication-factory leads to 403 - should be 500
> -------------------------------------------------------------------------------------
>
>                 Key: WFLY-8463
>                 URL: https://issues.jboss.org/browse/WFLY-8463
>             Project: WildFly
>          Issue Type: Bug
>          Components: Security
>            Reporter: Martin Choma
>            Assignee: Darran Lofthouse
>
> When I misconfigured {{http-authentication-factory}}, e.g. with unreal protocol "DOES_NOT_EXIST" I get http status code 403.
> I think 500 would be more appropriate here, as server is misconfigured and can't authenticate.
> 403 means user has not appropriate roles.
> In log there is
> {code}
> 10:08:06,309 TRACE [org.wildfly.security] (management task-6) java.lang.IllegalStateException: ELY01119: Unable to resolve MechanismConfiguration for mechanismType='HTTP', mechanismName='SPNEGO', hostName='localhost.localdomain', protocol='http'.
> {code}



--
This message was sent by Atlassian JIRA
(v7.2.3#72005)