[CALCITE-1487] Avatica{Json,Protobuf}Handler inadvertently returns HTTP/404 after authentication failure

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: avatica-1.11.0
• Component/s: avatica
• Labels: beginner
• Assignee: Josh Elser
• Reporter: Josh Elser
• Created: 09/Nov/16 21:54
• Updated: 09/Mar/18 23:25
• Resolved: 27/Jul/17 22:06

Description

I'm looking into a case where there are some authentication issues into an Avatica server. The SPNEGO handshake obviously failed via error in the server, but the client ultimately saw an HTTP/404 error which doesn't make sense (they should see a 401 or 403).

I think I see why this happens. In the handlers, when the server is configured to require authenticated users and a user is not authenticated, the handle() method just returns.

I believe the Handler implementation should set the Request as handled and set the appropriate response code. I believe the 404 is coming from the DefaultHandler (which has no html to serve for requests to "/").