OpenSearch/x-pack/plugin/security
Jason Tedor 7c5a3bcf6d
Always consume the body in has privileges (#50298)
Our REST infrastructure will reject requests that have a body where the
body of the request is never consumed. This ensures that we reject
requests on endpoints that do not support having a body. This requires
cooperation from the REST handlers though, to actually consume the body,
otherwise the REST infrastructure will proceed with rejecting the
request. This commit addresses an issue in the has privileges API where
we would prematurely try to reject a request for not having a username,
before consuming the body. Since the body was not consumed, the REST
infrastructure would instead reject the request as a bad request.
2019-12-18 08:30:53 -05:00
..
cli Apply 2-space indent to all gradle scripts (#49071) 2019-11-14 11:01:23 +00:00
forbidden Add an OpenID Connect authentication realm (#40674) (#41178) 2019-04-15 12:41:16 +03:00
licenses [7.x] Update opensaml dependency (#44972) (#49512) 2019-11-29 00:17:16 +02:00
qa Improved diagnostics for TLS trust failures (#49669) 2019-11-29 15:01:20 +11:00
src Always consume the body in has privileges (#50298) 2019-12-18 08:30:53 -05:00
build.gradle [7.x] Update opensaml dependency (#44972) (#49512) 2019-11-29 00:17:16 +02:00