From eb510ab59d644d624adcbac1a9a3f4f6b84a555d Mon Sep 17 00:00:00 2001 From: Steve Riesenberg <5248162+sjohnr@users.noreply.github.com> Date: Thu, 20 Mar 2025 15:43:53 -0500 Subject: [PATCH] Polish gh-16280 --- .../pages/servlet/authentication/passwords/basic.adoc | 8 +++----- 1 file changed, 3 insertions(+), 5 deletions(-) diff --git a/docs/modules/ROOT/pages/servlet/authentication/passwords/basic.adoc b/docs/modules/ROOT/pages/servlet/authentication/passwords/basic.adoc index 563b90d829..148a461ebb 100644 --- a/docs/modules/ROOT/pages/servlet/authentication/passwords/basic.adoc +++ b/docs/modules/ROOT/pages/servlet/authentication/passwords/basic.adoc @@ -24,11 +24,9 @@ The `RequestCache` is typically a `NullRequestCache` that does not save the requ [NOTE] ==== -The default HTTP Basic Auth Provider will suppress both Response body and `WWW-Authenticate` header in the 401 response when -the request was made with a `X-Requested-By: XMLHttpRequest` header. This allows frontends to implement their own -authentication code, instead of triggering the browser login dialog. -To override, implement your own -javadoc:org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint[] . +The default HTTP Basic Auth Provider will suppress both Response body and `WWW-Authenticate` header in the 401 response when the request was made with a `X-Requested-By: XMLHttpRequest` header. +This allows frontends to implement their own authentication code, instead of triggering the browser login dialog. +To override, implement your own javadoc:org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint[]. ==== When a client receives the `WWW-Authenticate` header, it knows it should retry with a username and password.