[SLING-2318] AuthUtil.send* methods should properly check the response and reset the buffer

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: Auth Core 1.0.6
• Fix Version/s: Auth Core 1.1.0
• Component/s: Authentication
• Assignee: Felix Meschberger
• Reporter: Felix Meschberger
• Created: 05/Dec/11 09:44
• Updated: 30/Nov/12 17:56
• Resolved: 05/Dec/11 09:45

Description

Currently the send* methods in the AuthUtil class depend on the HttpServletResponse implementation to check whether the response has already been committed or not. Some use cases do not check.

The methods should be improved to:
– properly check and throw the IllegalStateExceptions themselves
– reset the response buffer while preserving any headers already set