500 Error page (/error) requires authentication
- Dominant language
- Java
- Stars
- 11
- Forks
- 8
- PR merge metrics
- No merged PRs in 30d
Description
If a server error occurs that results in a 500 we are redirected to /error which in turn redirects to /login of we are not signed in.
This causes weird behavior when interacting with the OAuth API as we are not authenticated and the returned code for errors then becomes a 200 with /login after following all of the redirects.
Contributor guide
No contributing guide indexed for this repository
Research direction
Start by tracing the /error and /login redirect behavior for unauthenticated requests, then reproduce a server error through the OAuth API. Done means an unauthenticated 500 remains a 500 response instead of following redirects and returning a 200 login page. Check the existing work in linked pull request #973 before starting.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- java, spring-boot
- Domain
- api, authentication
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100