Brian Demers created SHIRO-591:
----------------------------------

             Summary: Basic Auth Filter permissive mode does NOT work
                 Key: SHIRO-591
                 URL: https://issues.apache.org/jira/browse/SHIRO-591
             Project: Shiro
          Issue Type: Bug
          Components: Web
    Affects Versions: 1.3.2, 1.3.1, 1.3.0
            Reporter: Brian Demers


The fix for SHIRO-200 assumed all filter options were http methods, for example:
{authcBasic[POST, GET]}

However, the 'permissive' option is also valid, which instructs the filter to 
check for authentication, but NOT require it:
{authcBasic[permissive]}
Or the two combine in something like:
authcBasic[permissive,POST, GET]



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Reply via email to