Uploaded image for project: 'JBoss Enterprise Application Platform'
  1. JBoss Enterprise Application Platform
  2. JBEAP-13298

Digest auth uses single use nonces, causing browsers to replay every request

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 7.1.0.CR4
    • None
    • Security
    • None

      The results in every single request being retried. This has two negative impacts. The extra request adds a round trip which hurts response time on high latency connections. Additionally large posts have double the bandwidth consumption and can be interpreted as failures. For example a 300 mb upload in the console would likely lead to the user assuming a hang.

        1. digestApp.war
          4 kB
          Jan Stourac
        2. exampleAuth.pcapng
          14 kB
          Jan Stourac
        3. roles.properties
          0.1 kB
          Jan Stourac
        4. standalone.xml
          18 kB
          Jan Stourac
        5. users.properties
          0.1 kB
          Jan Stourac

            darran.lofthouse@redhat.com Darran Lofthouse
            sdouglas1@redhat.com Stuart Douglas
            Jan Stourac Jan Stourac
            Jan Stourac Jan Stourac
            Votes:
            0 Vote for this issue
            Watchers:
            6 Start watching this issue

              Created:
              Updated:
              Resolved: