PerlDancer / PerlDancer/Dancer2
Add WWW-Authenticate header for 401 response
Nobody has claimed this yet.
- Dominant language
- Perl
- Stars
- 604
- Forks
- 288
- Avg merge
- 1d 5h
- Merged PRs (30d)
- 5
Description
response_403 says "Unauthorized"
It must be:
401: Unauthorized
403: Forbidden
The whole list can be found at: http://en.wikipedia.org/wiki/List_of_HTTP_status_codes for those that hate RFCs.
Since back in the '90s the were not so strict in using 'authorise' and 'authenticate' and messed it up...
It could had been:
401: Unauthenticated
403: Forbidden
a 401 should be provided with a "WWW-Authenticate" header as well
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the response_403 handling and the code that generates a 401 response. Check the existing status text and HTTP headers, then verify that 401 uses the requested authentication wording and includes WWW-Authenticate while 403 remains Forbidden.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- perl
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100