Uploaded image for project: 'PicketLink'
  1. PicketLink
  2. PLINK-176

HTTP digest authentication returning 401 with valid users

    XMLWordPrintable

Details

    • Feature Request
    • Resolution: Done
    • Major
    • PLINK_2.5.0.beta4
    • PLINK_3.0.0.beta2, PLINK_2.5.0.beta4
    • IDM
    • None

    Description

      Hi guys, maybe I'm doing something wrong, but digest authentication has just stopped to work after update to the latest changes from PicketLink respository.

      I didn't test it against beta3, because the artifact was removed from maven central. To reproduce the issue:

      git clone https://github.com/abstractj/aerogear-controller-demo
      cd aerogear-controller-demo && git checkout picketlink_beta2
      mvn clean package and deploy it

      Run:

      curl -b --cookie -v --user john:123 --digest "http://localhost:8080/aerogear-controller-demo/mycars

      The authentication will succeed. Now clone PicketLink repo:

      git clone https://github.com/picketlink/picketlink
      cd picketlink && mvn clean install

      Go to aerogear-controller-demo & git checkout picketlink_beta4
      mvn clean package & deploy it

      Run:

      curl -b --cookie -v --user john:123 --digest "http://localhost:8080/aerogear-controller-demo/mycars

      Thanks in advance.

      ps: Looks like it was already solved in beta2 https://gist.github.com/sbryzak/483a2a380ee731cbef91

      Attachments

        Issue Links

          Activity

            People

              psilva@redhat.com Pedro Igor Craveiro
              boliveir_managed_kafka_security (inactive user) Bruno Oliveira Silva (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: