AnilKumarHurkadli opened a new pull request #869:
URL: https://github.com/apache/cxf/pull/869


   [CXF-8535] Query missing from signature request-target AND also to add 
digest only if request has body
   
   The following fixes are incorporated in this PR
   
   1) The issue was instead of using getRequestUri of URI info to consider the 
query parameters in the request-target , getAbsolutePath was used which 
truncates the query parameters in VerifySignatureFilter and results in Invalid 
Signature while verifying.
   
   2) In addition to that, digest will be added to the required headers only if 
the request has payload/body.
   
   Test cases are also been incorporated for the above fix


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


Reply via email to