[ 
https://issues.apache.org/jira/browse/ATLAS-4465?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Radhika Kundam updated ATLAS-4465:
----------------------------------
    Attachment: Error_for_login_POST_request.png

> Atlas login request should be allowed only for HTTP GET request 
> ----------------------------------------------------------------
>
>                 Key: ATLAS-4465
>                 URL: https://issues.apache.org/jira/browse/ATLAS-4465
>             Project: Atlas
>          Issue Type: Bug
>    Affects Versions: 3.0.0
>            Reporter: Radhika Kundam
>            Assignee: Radhika Kundam
>            Priority: Major
>         Attachments: Error_for_login_POST_request.png
>
>
>  {{Request to Atlas login page [http://localhost:21000/login.jsp] is 
> returning the login page irrespective of type of 
> RequestMethod(GET/DELETE/PUT/POST).}}
> Ex: 
> curl -X GET -u <username>:<password> '[http://localhost:21000/login.jsp]' 
> should return login page successfully.
> curl -X PUT -u <username>:<password> '[http://localhost:21000/login.jsp]' 
> should not be allowed
> {{With this fix request to login page should be succeed only in case of Http 
> RequestMethod GET}}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to