95a8f77146
Custom realms may enable the use of other authorization schemes than just basic authentication and these schemes should work in addition to our built in realms. However, our built in realms use the UsernamePasswordToken class to parse the Authorization header, which had a check to ensure the token was for basic authentication and if not, an exception was thrown. The throwing of the exception stops the authentication process and prevents custom realms from evaluating the header if they come later in the ordering of realms. This change removes the throwing of the exception unless the header starts with 'Basic ' and is invalid. Original commit: elastic/x-pack-elasticsearch@fd438ded95 |
||
---|---|---|
.. | ||
license | ||
qa | ||
x-dev-tools | ||
x-pack | ||
build.gradle | ||
checkstyle_suppressions.xml |