[jira] Closed: (SHIRO-106) AuthorizationFilter needs to use sendError not setStatus to make container process the request through ERROR dispatcher

["Kalle Korhonen (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/SHIRO-106?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Kalle Korhonen closed SHIRO-106.
--------------------------------

    Resolution: Fixed

Fixed in r821251

> AuthorizationFilter needs to use sendError not setStatus to make container process the request through ERROR dispatcher
> -----------------------------------------------------------------------------------------------------------------------
>
>                 Key: SHIRO-106
>                 URL: https://issues.apache.org/jira/browse/SHIRO-106
>             Project: Shiro
>          Issue Type: Bug
>          Components: Authorization (access control) 
>    Affects Versions: 1.0
>         Environment: any
>            Reporter: Kalle Korhonen
>             Fix For: 1.0
>
>         Attachments: SHIRO-106.patch
>
>
> AuthorizationFilter currently calls setStatus when returning SC_UNAUTHORIZED (401). This is wrong because container won't invoke ERROR dispatcher (and consequently, application filters handling custom error-pages don't have a chance to respond). Would have liked to make this my first commit, but I'll add a patch instead while I'm still waiting for my Apache account to be created. Free game for anybody to apply in the meantime.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.