Uploaded image for project: 'Shindig'
  1. Shindig
  2. SHINDIG-1799

system.listMethods fails if shindig.allowUnauthenticated = false

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Resolved
    • Major
    • Resolution: Fixed
    • 2.5.0
    • 2.5.0, 2.5.0-beta3
    • Java
    • None

    Description

      If shindig.allowUnauthenticated = false, then the AnonymousAuthenticationHandler will not had an AnonymousSecurityToken to the incoming request. If there is no security token on a request, then the JsonRpcServlet and DataServiceServlet will reject the request. The system.listMethods request created by the DefaultServiceFetcher does not contain a security token, so it will be rejected, and the server will be unable to initialize correctly.

      Attachments

        1. defservicefetcher6.patch
          8 kB
          Brian Lillie

        Activity

          People

            Unassigned Unassigned
            brianlil Brian Lillie
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: