[FELIX-1983] WebConsole HttpContext should flush response after setting response status

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: webconsole-2.0.4
• Fix Version/s: webconsole-2.0.6
• Component/s: Web Console
• Assignee: Felix Meschberger
• Reporter: Felix Meschberger
• Created: 13/Jan/10 10:12
• Updated: 27/Jan/10 12:13
• Resolved: 13/Jan/10 10:14

Description

The Web Console uses its own HttpContext implementation to handle authentication. When authentication is missing, it sets (or currently sendError) the response status 401/UNAUTHENTICATED but does not flush the response.

The Felix Http Base code overwrites this to 403/FORBIDDEN if the response is not committed.

So to ensure, the correct status is really sent, the handleSecurity implementation must flush the response.