Skip to content

BROOKLYN-323: Use proper WWW-Authorization header in karaf#578

Merged
asfgit merged 1 commit intoapache:masterfrom
bostko:logout-api
Mar 6, 2017
Merged

BROOKLYN-323: Use proper WWW-Authorization header in karaf#578
asfgit merged 1 commit intoapache:masterfrom
bostko:logout-api

Conversation

@bostko
Copy link
Copy Markdown
Contributor

@bostko bostko commented Mar 2, 2017

  • Give valid WWW-Authorization header to the client.
    Previously it was just WWW-Authorization: Basic
    Where it has to be WWW-Authorization: Basic realm="something" That was major Chrome complain for dissrespecting that header.
  • LogoutApi#unAuthorize method useful for making browsers forget Basic Authentication

This PR should be reviewed and merged together with apache/brooklyn-ui#36

<bean class="org.apache.brooklyn.rest.util.FormMapProvider"/>
<bean class="org.apache.cxf.jaxrs.security.JAASAuthenticationFilter">
<property name="contextName" value="webconsole"/>
<property name="realmName" value="webconsole"/>
Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This sets proper WWW-Authorization: Basic realm="something"

@bostko bostko changed the title BROOKLYN-323: Logout fixes for karaf distribution BROOKLYN-323: Use proper WWW-Authorization header in karaf Mar 2, 2017
@sjcorbett
Copy link
Copy Markdown
Contributor

@bostko looks good. Will test and merge if ok.

@sjcorbett
Copy link
Copy Markdown
Contributor

I'll leave this while brooklyn-ui#36 is still open.

Copy link
Copy Markdown
Member

@m4rkmckenna m4rkmckenna left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@bostko
Copy link
Copy Markdown
Contributor Author

bostko commented Mar 3, 2017

This PR is not dependent brooklyn-ui#36.

 - Give valid WWW-Authorization header to the client.
   Previously it was just WWW-Authorization: Basic
   Where it has to be WWW-Authorization: Basic realm="something"
- LogoutApi#unAuthorize method useful for making browsers forget Basic Authentication
@asfgit asfgit merged commit 7f4be55 into apache:master Mar 6, 2017
asfgit pushed a commit that referenced this pull request Mar 6, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants