mirror of https://github.com/OpenIdentityPlatform/OpenDJ.git

Jean-Noel Rouvignac
23.08.2013 a163179dc83360c41ce15fa0060efade1007bf9a
refs
author Jean-Noel Rouvignac <jean-noel.rouvignac@forgerock.com>
Tuesday, April 23, 2013 16:08 +0200
committer Jean-Noel Rouvignac <jean-noel.rouvignac@forgerock.com>
Tuesday, April 23, 2013 16:08 +0200
commita163179dc83360c41ce15fa0060efade1007bf9a
tree 1190f2c4b690eb5be91e21d2f3f81392aadc2563 tree | zip | gz
parent a254bd2cc5c027bd79d1380e0e8364b4b688f93e view | diff
OPENDJ-830 (CR-1595) Implement authentication and authorization for HTTP connection handler


Fixed information leak on unsuccessful authentication: if the username was incorrect, the server was returning 404 (not found) instead of 401 (invalid credentials).
When authentication was unsuccessful, the client was not receiving a response and the connection was not closed leaving it hanging.


CollectClientConnectionFilter.java:
In DoBindResultHandler.handleErrorResult(), send back an authentication failure when a search on the user name does not return a unique result.
In sendAuthenticationFailure(), correctly complete the AsyncContext.
In doFilter(), removed the call to AsyncContext.setTimeout().
1 files modified
42 ■■■■ changed files
opendj-sdk/opends/src/server/org/opends/server/protocols/http/CollectClientConnectionsFilter.java 42 ●●●● diff | view | raw | blame | history