mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

Jean-Noel Rouvignac
23.08.2013 2638f9432aed1829c9a7d4b7882d69f74b018b28
refs
author Jean-Noel Rouvignac <jean-noel.rouvignac@forgerock.com>
Tuesday, April 23, 2013 16:08 +0200
committer Jean-Noel Rouvignac <jean-noel.rouvignac@forgerock.com>
Tuesday, April 23, 2013 16:08 +0200
commit2638f9432aed1829c9a7d4b7882d69f74b018b28
tree 68f1b924c6ad77bba9ba3aa76ecb0b16eabaf524 tree | zip | gz
parent 202b9cdeebbd40337f0de6ae106d6b5293d1ea46 view | diff
OPENDJ-830 (CR-1595) Implement authentication and authorization for HTTP connection handler


Fixed information leak on unsuccessful authentication: if the username was incorrect, the server was returning 404 (not found) instead of 401 (invalid credentials).
When authentication was unsuccessful, the client was not receiving a response and the connection was not closed leaving it hanging.


CollectClientConnectionFilter.java:
In DoBindResultHandler.handleErrorResult(), send back an authentication failure when a search on the user name does not return a unique result.
In sendAuthenticationFailure(), correctly complete the AsyncContext.
In doFilter(), removed the call to AsyncContext.setTimeout().
1 files modified
42 ■■■■ changed files
opends/src/server/org/opends/server/protocols/http/CollectClientConnectionsFilter.java 42 ●●●● diff | view | raw | blame | history