[SHIRO-591] Basic Auth Filter permissive mode does NOT work

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 1.3.0, 1.3.1, 1.3.2
• Fix Version/s: 1.4.0-RC2
• Component/s: Web
• Labels: regresion
• Assignee: Unassigned
• Reporter: Brian Demers
• Created: 10/Oct/16 19:07
• Updated: 25/Oct/17 20:03
• Resolved: 21/Oct/16 14:52

Description

The fix for SHIRO-200 assumed all filter options were http methods, for example:

{authcBasic[POST, GET]}

However, the 'permissive' option is also valid, which instructs the filter to check for authentication, but NOT require it:

{authcBasic[permissive]}

Or the two combine in something like:
authcBasic[permissive,POST, GET]