Skip to content

[WFLY-21323] http-custom-mechanism is accepting the req with invalid password#1171

Open
rafaeldarosagit wants to merge 2 commits into
wildfly:mainfrom
rafaeldarosagit:WFLY-21323
Open

[WFLY-21323] http-custom-mechanism is accepting the req with invalid password#1171
rafaeldarosagit wants to merge 2 commits into
wildfly:mainfrom
rafaeldarosagit:WFLY-21323

Conversation

@rafaeldarosagit

@rafaeldarosagit rafaeldarosagit commented May 21, 2026

Copy link
Copy Markdown

Issue: https://redhat.atlassian.net/browse/WFLY-21323
Description: Authentication mechanism was accepting requests with invalid passwords when users had valid authorization groups. Added missing return statement after authentication failed.

@emmartins

Copy link
Copy Markdown
Contributor

thanks @rafaeldarosagit , I will review this week

@emmartins emmartins left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please also squash the commits into a single one, and which commit message should start with [WFLY-21323]

final HttpRequest request = HttpRequest.newBuilder()
.uri(new URI(serverHost+"/http-custom-mechanism-webapp/secured"))
.header("X-USERNAME", "quickstartUser")
.header("X-PASSWORD", "quickstartPwd1")

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Password here is wrong too, it should be quickstartPwd1!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants