Uploaded image for project: 'WildFly Elytron'
  1. WildFly Elytron
  2. ELY-1410

Digest auth does not support nonce count, causing browsers to replay every request

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 1.1.6.Final, 1.2.0.Beta8
    • None
    • HTTP
    • None

      The results in every single request being retried. This has two negative impacts. The extra request adds a round trip which hurts response time on high latency connections. Additionally large posts have double the bandwidth consumption and can be interpreted as failures. For example a 300 mb upload in the console would likely lead to the user assuming a hang.

        1.
        		 Add configuration for nonce handling timeouts etc... Sub-task Open Major Unassigned
        2.
        		 Add last used time tracking to nonces to extend usable window Sub-task Resolved Major Darran Lofthouse
        3.
        		 Update next nonce issuing to test if current nonce is still usable Sub-task Resolved Major Darran Lofthouse
        4.
        		 Add unseen nonce count tracking support Sub-task Open Major Unassigned

            sdouglas1@redhat.com Stuart Douglas
            sdouglas1@redhat.com Stuart Douglas
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: