Jeff Trawick wrote:

 The app is out of spec either way.  I think the trunk behavior is better.

  I'd agree on both counts (the latter IMHO, of course).  For reference,
here's a breakdown of 2.3.7 vs. trunk behaviour for Authorizers:

Authorizer response        2.3.7                       trunk
===================        =====                       =====
200                        proceed                     proceed
200 + rel Location         200 + munged out + err      401
200 + bad rel Location     404 + munged err + err      401
200 + abs Location         302 + Location              401
all other                  401                         401

  I'll try to run some quick smoke tests on your 2.3.9 over the weekend;
thanks again for pushing this along.

Chris.

--
GPG Key ID: 088335A9
GPG Key Fingerprint: 86CD 3297 7493 75BC F820  6715 F54F E648 0883 35A9

Reply via email to