In this case if it is not taken into account you can remove it? Or perhaps it depends of authentication choice? I suppose it was configurable because there was a need (like monitoring by example)? ________________________________ De : Thomas Mortagne <[email protected]> À : Pascal BASTIEN <[email protected]>; XWiki Developers <[email protected]> Envoyé le : Mardi 16 septembre 2014 9h55 Objet : Re: [xwiki-devs] A quick tiny "issue" to fix in 6.2RC1 This is indeed very weird. Note that I just tested to fail the login and got 403 so additionally it's not really fully taken into account (I don't really see the point of making it configurable anyway). Would be great if you could create an issue on http://jira.xwiki.org. On Tue, Sep 16, 2014 at 9:42 AM, Pascal BASTIEN <[email protected]> wrote:
Hello,
There are a tiny "issue" to fix in default xwiki.cfg: #-# HTTP status code to sent when the authentication failed. xwiki.authentication.unauthorized_code=200
I think 401 (OR 403) is more appropriate, isn't it?
wdyt?
Thxs
Pascal B _______________________________________________ devs mailing list [email protected] http://lists.xwiki.org/mailman/listinfo/devs
-- Thomas Mortagne