[jira] Commented: (SLING-1400) OPTIONS request on / returns login form if "Allow Anonymous Access" set to false

["Felix Meschberger (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/SLING-1400?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12912472#action_12912472 ] 

Felix Meschberger commented on SLING-1400:
------------------------------------------

Proposed patch here: http://codereview.appspot.com/2192046/

> OPTIONS request on / returns login form if "Allow Anonymous Access" set to false
> --------------------------------------------------------------------------------
>
>                 Key: SLING-1400
>                 URL: https://issues.apache.org/jira/browse/SLING-1400
>             Project: Sling
>          Issue Type: Bug
>          Components: Authentication
>            Reporter: Bertrand Delacretaz
>            Priority: Minor
>
> If "Allow Anonymous Access" is true (that's the default default) in theorg.apache.sling.engine.impl.auth.SlingAuthenticator config, curl -X OPTIONS http://localhost:8888/ correctly returns a 401 status.
> If the setting is false, the same request returns 200 and the login form.
> Not sure if that's really a problem, but I thought I'd report it as it caused the WebDAV mount on / to become unusable with samples that recommend setting that parameter to false. I'll change the samples to use sling:authRequestLogin=true instead.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.