Details
-
Bug
-
Status: Resolved
-
Major
-
Resolution: Fixed
-
2.5.0
-
None
Description
If shindig.allowUnauthenticated = false, then the AnonymousAuthenticationHandler will not had an AnonymousSecurityToken to the incoming request. If there is no security token on a request, then the JsonRpcServlet and DataServiceServlet will reject the request. The system.listMethods request created by the DefaultServiceFetcher does not contain a security token, so it will be rejected, and the server will be unable to initialize correctly.