I can find it in the code but did not analyzed exactly in which use case it's really used and how. On Tue, Sep 16, 2014 at 10:10 AM, Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr> wrote: -- Thomas Mortagne

Thanks. On Tue, Sep 16, 2014 at 10:18 AM, Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr> wrote: -- Thomas Mortagne

Hello, Thxs a lot for your answer, (It is not very important) but I do not have the same opinion: http://www.w3schools.com/tags/ref_httpmessages.asp indicate: 2xx: Successful: 200 "The request is OK (this is the standard response for successful HTTP requests) 4xx: Client Error 401 Unauthorized The request was a legal request, but the server is refusing to respond to it. For use when authentication is possible but has failed or not yet been provided 403 Forbidden The request was a legal request, but the server is refusing to respond to it Of course, there are some web site who's doesn't respect w3c but if I'm looking for this term on google: http status "failed login" and I obtain 4xx code. But i repeat I think is is not important ... except for my web center admin ;-) It doesn't matter because every admin can modify this parameter :-) Pascal B. ________________________________ De : Sergiu Dumitriu <sergiu(a)xwiki.org> À : Pascal BASTIEN <pbasnews-xwiki(a)yahoo.fr>fr>; XWiki Developers <devs(a)xwiki.org> Envoyé le : Mardi 16 septembre 2014 21h12 Objet : Re: [xwiki-devs] A quick tiny "issue" to fix in 6.2RC1 This is sent for "failed login" errors [1]. IIRC, I might have changed this value sometime in... 2006? The reason was that links (the browser) was displaying a BASIC login prompt which prevented the HTML login form from working, and the BASIC auth doesn't work unless the URL also contains basicauth=1. The status codes affect the current HTTP request, and the action is to submit (bad) authentication credentials. I don't think using 401 or 403 is correct: - 401: am I required to log in before submitting my credentials? - 403: am I forbidden from submitting my credentials? I checked a few other sites, and they all use 200 when providing wrong passwords. [1] https://github.com/xwiki/xwiki-platform/blob/master/xwiki-platform-core/xwi… On 09/16/2014 03:42 AM, Pascal BASTIEN wrote: -- Sergiu Dumitriu http://purl.org/net/sergiu