jaspic-spec
  1. jaspic-spec
  2. JASPIC_SPEC-4

servlet profile does not profile the use of the spi under HttpServletRequest#authenticate

    Details

    • Type: Bug Bug
    • Status: Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Labels:
      None

      Description

      when jsr 196 is configured for a Servlet application, the jsr 196 configuration
      must be applied when HttpServletRequest#authenticate is called.

      In that case, a call to HttpServletRequest#login must throw an exception since
      the configured authentication mechanism may not be password based.

      the servlet profile must also define what happens when
      HttpServletRequest#logout is called

        Activity

          People

          • Assignee:
            monzillo
            Reporter:
            monzillo
          • Votes:
            1 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated: