Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-13298

Digest auth uses single use nonces, causing browsers to replay every request

    XMLWordPrintable

Details

    • Bug
    • Status: Verified (View Workflow)
    • Blocker
    • Resolution: Done
    • None
    • 7.1.0.CR4
    • Security
    • None

    Description

      The results in every single request being retried. This has two negative impacts. The extra request adds a round trip which hurts response time on high latency connections. Additionally large posts have double the bandwidth consumption and can be interpreted as failures. For example a 300 mb upload in the console would likely lead to the user assuming a hang.

      Attachments

        1. digestApp.war
          4 kB
        2. exampleAuth.pcapng
          14 kB
        3. roles.properties
          0.1 kB
        4. standalone.xml
          18 kB
        5. users.properties
          0.1 kB

        Issue Links

          Activity

            People

              darran.lofthouse@redhat.com Darran Lofthouse
              sdouglas1@redhat.com Stuart Douglas
              Jan Stourac Jan Stourac
              Votes:
              0 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: