[
https://issues.apache.org/jira/browse/KNOX-3272?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Work on KNOX-3272 started by Sandor Molnar.
-------------------------------------------
> ClientID validation issues
> --------------------------
>
> Key: KNOX-3272
> URL: https://issues.apache.org/jira/browse/KNOX-3272
> Project: Apache Knox
> Issue Type: Bug
> Components: Server
> Affects Versions: 3.0.0
> Reporter: Sandor Molnar
> Assignee: Sandor Molnar
> Priority: Critical
> Fix For: 3.0.0
>
>
> The following issues have been observed while testing negative cases for the
> CLIENTID service:
> * Trying to fetch access token without passing secret is failing with 400
> bad request -> this should be 401
> * We can authenticate to a backend service without passing the clientId
> (only with client_secret)
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
