Jetty

Case Sensitive Basic Authentication Response Header Implementations

Details

  • Type: Bug Bug
  • Status: Resolved Resolved
  • Priority: Major Major
  • Resolution: Fixed
  • Affects Version/s: None
  • Fix Version/s: 7.0.0pre4, 6.1.12.rc3, 6.1.12
  • Component/s: None
  • Labels:
    None
  • Patch Submitted:
    Yes
  • Number of attachments :
    1

Description

Although the HTTP Authentication: Basic and Digest Access Authentication RFC states that the http headers should use "an extensible,
case-insensitive token to identify the authentication scheme" libraries like acegi security require the response header to be case sensitive. ie "Basic" not "basic"

Activity

Ascending order - Click to sort in descending order
David Yu made changes -
Field Original Value New Value
Assignee David Yu [ dyu ]
Hide
Permalink
David Yu added a comment -

patch applied.

Show
David Yu added a comment - patch applied.
David Yu made changes -
Resolution Fixed [ 1 ]
Fix Version/s 6.1.12.rc3 [ 14575 ]
Fix Version/s 6.1.12 [ 14380 ]
Fix Version/s 7.0.0pre4 [ 14494 ]
Status Open [ 1 ] Resolved [ 5 ]
Fix Version/s 7.0.0 [ 14176 ]
Greg Wilkins made changes -
Fix Version/s 7.0.0 [ 14176 ]

People

  • Assignee:
    David Yu
    Reporter:
    Markus Kobler
Vote (0)
Watch (0)

Dates

  • Created:
    Updated:
    Resolved: