honeymoose
/
OpenSearch
mirror of https://github.com/honeymoose/OpenSearch.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Skip authentication for rest OPTIONS call 

this is required by CORS for unauthenticated pre-flight OPTIONS requests

Closes elastic/elasticsearch#234

Original commit: elastic/x-pack-elasticsearch@c368b2cf27
This commit is contained in:
uboness 2014-10-22 06:07:16 +02:00
parent 3d71356596
commit fa48c46813
1 changed files with 6 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
src/main/java/org/elasticsearch/shield/SecurityFilter.java
View File

@ -129,7 +129,12 @@ public class SecurityFilter extends AbstractComponent {
@Override @Override
public void process(RestRequest request, RestChannel channel, RestFilterChain filterChain) throws Exception { public void process(RestRequest request, RestChannel channel, RestFilterChain filterChain) throws Exception {
filter.authenticate(request);
// CORS - allow for preflight unauthenticated OPTIONS request
if (request.method() != RestRequest.Method.OPTIONS) {
filter.authenticate(request);
}
filterChain.continueProcessing(request, channel); filterChain.continueProcessing(request, channel);
} }
} }