response status of invalid ticket
Open
Nobody has claimed this yet.
Enhancement
- Dominant language
- PHP
- Stars
- 798
- Forks
- 419
- PR merge metrics
- No merged PRs in 30d
Description
For a request with an invalid ticket, PHP CAS prints an error message, but the response status is still 200. In this case, 403 is more appropriate.
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the invalid-ticket handling in the PHP CAS client and tracing where the HTTP response status is set. Verify the existing error response, then ensure invalid tickets produce HTTP 403 rather than 200 while retaining the error message. Add or update a regression test if the relevant test area is found.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- php
- Domain
- authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 45/100