You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@atlas.apache.org by "Radhika Kundam (Jira)" <ji...@apache.org> on 2021/10/29 00:54:00 UTC

[jira] [Updated] (ATLAS-4465) Atlas login request should be allowed only for HTTP GET request

     [ https://issues.apache.org/jira/browse/ATLAS-4465?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Radhika Kundam updated ATLAS-4465:
----------------------------------
    Description: 
 {{Request to Atlas login page [http://localhost:21000/login.jsp] is returning the login page irrespective of type of RequestMethod(GET/DELETE/PUT/POST).}}
Ex: 
curl -X GET -u <username>:<password> '[http://localhost:21000/login.jsp]' should return login page successfully.

curl -X PUT -u <username>:<password> '[http://localhost:21000/login.jsp]' should not be allowed

{{With this fix request to login page should be succeed only in case of Http RequestMethod GET}}

  was:
 

{{Request to http://localhost:21000/login.jsp is returning the login page irrespective of type of RequestMethod(GET/DELETE/PUT/POST).}}

{{With this fix request to login page should be succeed only in case of Http RequestMethod GET}}


> Atlas login request should be allowed only for HTTP GET request 
> ----------------------------------------------------------------
>
>                 Key: ATLAS-4465
>                 URL: https://issues.apache.org/jira/browse/ATLAS-4465
>             Project: Atlas
>          Issue Type: Bug
>    Affects Versions: 3.0.0
>            Reporter: Radhika Kundam
>            Assignee: Radhika Kundam
>            Priority: Major
>
>  {{Request to Atlas login page [http://localhost:21000/login.jsp] is returning the login page irrespective of type of RequestMethod(GET/DELETE/PUT/POST).}}
> Ex: 
> curl -X GET -u <username>:<password> '[http://localhost:21000/login.jsp]' should return login page successfully.
> curl -X PUT -u <username>:<password> '[http://localhost:21000/login.jsp]' should not be allowed
> {{With this fix request to login page should be succeed only in case of Http RequestMethod GET}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)