Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-13298

Digest auth uses single use nonces, causing browsers to replay every request

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 7.1.0.CR4
    • None
    • Security
    • None

      The results in every single request being retried. This has two negative impacts. The extra request adds a round trip which hurts response time on high latency connections. Additionally large posts have double the bandwidth consumption and can be interpreted as failures. For example a 300 mb upload in the console would likely lead to the user assuming a hang.

        1. digestApp.war
          4 kB
        2. exampleAuth.pcapng
          14 kB
        3. roles.properties
          0.1 kB
        4. standalone.xml
          18 kB
        5. users.properties
          0.1 kB

              darran.lofthouse@redhat.com Darran Lofthouse
              sdouglas1@redhat.com Stuart Douglas (Inactive)
              Jan Stourac Jan Stourac
              Jan Stourac Jan Stourac
              Votes:
              0 Vote for this issue
              Watchers:
              7 Start watching this issue

                Created:
                Updated:
                Resolved: