apache / apache/grails-core

GPSPRINGSECURITYCORE-228: X509 continueFilterChainOnUnsuccessfulAuthentication flag does not seem to work

Open
#15,864 0 comments 0 reactions 1 assignee Claimed by @burtbeckwith View on GitHub
relates-to:spring-security type: bug type: major
Dominant language
Groovy
Stars
2.9k
Forks
975
Avg merge
1d 22h
Merged PRs (30d)
92

Description

Original Reporter: steven_a_s
Environment: Not Specified
Version: Grails-Spring-Security-Core 1.2.7.3
Migrated From: http://jira.grails.org/browse/GPSPRINGSECURITYCORE-228

After setting the useX509 flag to true, users that attempt to access the site without a certificate with a user-matching DN are returned a 503 reply. Setting the x509.continueFilterChainOnUnsuccessfulAuthentication flag to true in my own configuration seems to make no difference.

Right now I can work around the issue by adding a URL mapping for 503 responses to the auth form.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.