[SYNCOPE-883] Can't access REST API via browser

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.0.0-M4
• Fix Version/s: 2.0.0.M5
• Assignee: Francesco Chicchiriccò
• Reporter: Colm O hEigeartaigh
• Created: 28/Jun/16 15:47
• Updated: 20/Jan/17 15:53
• Resolved: 27/Aug/16 14:54

Description

With the latest 2.0.0-SNAPSHOT, I noticed that accessing the REST API without supplying a username/password returns 403 as opposed to the old 401.

wget http://localhost:9080/syncope/rest/users

-2016-06-28 15:40:01- http://localhost:9080/syncope/rest/users
Resolving localhost (localhost)... 127.0.0.1
Connecting to localhost (localhost)|127.0.0.1|:9080... connected.
HTTP request sent, awaiting response... 403
2016-06-28 15:40:01 ERROR 403: (no description).

Whereas with 1.2.7:

wget http://localhost:9080/syncope/rest/users
-2016-06-28 15:29:42- http://localhost:9080/syncope/rest/users
Resolving localhost (localhost)... 127.0.0.1
Connecting to localhost (localhost)|127.0.0.1|:9080... connected.
HTTP request sent, awaiting response... 401 Unauthorized

Username/Password Authentication Failed.

This means that if you open up a web browser and try to access say:

http://localhost:9080/syncope/rest/users

a pop-up windows does not appear for the user to enter the user/password.

Issue Links

• relates to: SYNCOPE-999 REST exception mapper overwrites Spring Security response
• links to: ML thread