safebox/guacamole-client
4
0
Fork 0
mirror of https://github.com/gyurix1968/guacamole-client.git synced 2025-10-31 00:53:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

GUAC-562: Send 403 for UNAUTHORIZED, even though 401 seems more appropriate. To do otherwise causes problems when HTTP authorize headers are present in the request (see: http://www.w3.org/Protocols/rfc2616/rfc2616-sec10.html).

Browse Source
This commit is contained in:
Michael Jumper
2014-03-24 19:49:23 -07:00
parent b6ce30318a
commit d112a747b6
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
guacamole-common/src/main/java/org/glyptodon/guacamole/protocol/GuacamoleStatus.java
View File

@@ -81,9 +81,11 @@ public enum GuacamoleStatus {
/**
* Permission was denied to perform the operation, as the user is not yet
* authorized (not yet logged in, for example).
* authorized (not yet logged in, for example). As HTTP 401 has implications
* for HTTP-specific authorization schemes, this status continues to map to
* HTTP 403 ("Forbidden"). To do otherwise would risk unintended effects.
*/
CLIENT_UNAUTHORIZED(401, 1008, 0x0301),
CLIENT_UNAUTHORIZED(403, 1008, 0x0301),
/**
* Permission was denied to perform the operation, and this operation will