Uploaded image for project: 'WildFly WIP'
  1. WildFly WIP
  2. WFWIP-328

HTTP External Security: Both unauthorized and unauthenticated HTTP requests return 403

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Not a Bug
    • Icon: Critical Critical
    • Security
    • None

      Related RFE: EAP7-1323 - HTTP External Security Not Supported by Elytron

      Both unauthorized and unauthenticated HTTP requests return 403.

      Unauthorized user should receive 403 HTTP response, but unauthenticated user should receive 401 HTTP code

      I check it on WebSecurityExternalAuthTestCase (from wf-ts) and my new test for wrong authentication is failing (see this commit)

      This is not a regression against legacy security

      Related RFC: RFC-7235

              aabdelsa Ashley Abdel-Sayed (Inactive)
              mkopecky@redhat.com Marek Kopecky
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                Resolved: