Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-1410

Digest auth does not support nonce count, causing browsers to replay every request

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 1.1.6.Final, 1.2.0.Beta8
    • None
    • HTTP
    • None

      The results in every single request being retried. This has two negative impacts. The extra request adds a round trip which hurts response time on high latency connections. Additionally large posts have double the bandwidth consumption and can be interpreted as failures. For example a 300 mb upload in the console would likely lead to the user assuming a hang.

          1.
          		 Add configuration for nonce handling timeouts etc... Sub-task Open Major Unassigned
          2.
          		 Add last used time tracking to nonces to extend usable window Sub-task Resolved Major Darran Lofthouse
          3.
          		 Update next nonce issuing to test if current nonce is still usable Sub-task Resolved Major Darran Lofthouse
          4.
          		 Add unseen nonce count tracking support Sub-task Open Major Unassigned

              sdouglas1@redhat.com Stuart Douglas (Inactive)
              sdouglas1@redhat.com Stuart Douglas (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: