Refute should come after identity assertion in all cases. This might not have mattered before but I've added some capability to the rewrite filter that should happen after the identity assert has had a crack at the request. In particular if there is any principal mapping done that needs to be done before rewrite.
> On Sep 27, 2013, at 8:48 PM, Dilli Arumugam <[email protected]> wrote: > > On reviewing the gateway.xml in the deployed knox webapp, a question. > > Look at line 115 > rewrite filter comes after identity-assertion filter. > > Look at line 77. > rewrite filter comes before identity-assertion filter. > In most of the resources, rewrite filter comes before idenity-assertion > filter. > > So, what we see at line 115, rewrite filter coming after > indentity-assertion filter, is it by design? > > Thanks > Dilli > > -- > CONFIDENTIALITY NOTICE > NOTICE: This message is intended for the use of the individual or entity to > which it is addressed and may contain information that is confidential, > privileged and exempt from disclosure under applicable law. If the reader > of this message is not the intended recipient, you are hereby notified that > any printing, copying, dissemination, distribution, disclosure or > forwarding of this communication is strictly prohibited. If you have > received this communication in error, please contact the sender immediately > and delete it from your system. Thank You. -- CONFIDENTIALITY NOTICE NOTICE: This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential, privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any printing, copying, dissemination, distribution, disclosure or forwarding of this communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank You.
