[ 
https://issues.apache.org/jira/browse/KNOX-3032?focusedWorklogId=917041&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-917041
 ]

ASF GitHub Bot logged work on KNOX-3032:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 30/Apr/24 15:05
            Start Date: 30/Apr/24 15:05
    Worklog Time Spent: 10m 
      Work Description: smolnar82 merged PR #902:
URL: https://github.com/apache/knox/pull/902




Issue Time Tracking
-------------------

    Worklog Id:     (was: 917041)
    Time Spent: 1h  (was: 50m)

> Passcode token verification doesn't return error when TSS is disabled
> ---------------------------------------------------------------------
>
>                 Key: KNOX-3032
>                 URL: https://issues.apache.org/jira/browse/KNOX-3032
>             Project: Apache Knox
>          Issue Type: Bug
>          Components: Server
>    Affects Versions: 2.0.0
>            Reporter: Sandor Molnar
>            Assignee: Sandor Molnar
>            Priority: Major
>             Fix For: 2.1.0
>
>         Attachments: proxy-token.xml
>
>          Time Spent: 1h
>  Remaining Estimate: 0h
>
> *Steps to reproduce:*
>  * configure a new topology (e.g. proxy-token) with {{JWTProvider}} where 
> {{knox.token.exp.server-managed}} is set to {{false}} (see an example in the 
> attachment)
>  * acquire a Knox Token using the Token Generation UI
>  * use the {{Passcode}} field in a {{curl}} request against a service 
> endpoint in the new topology
> *Current results:*
> Knox returns an HTTP response with 200 status code
> {noformat}
> $ curl -iku 
> Passcode:TkdVd1l6VTBPR0l0TmpVMk9DMDBNRFl4TFdFelpHTXROakk1TURnd09EYzJOVEJoOjpNREV6T0dGaFpXUXRZMkV5WVMwME4yWXhMVGhsWkRndFpUQmpNemszTlRrMlpqazE=
>  https://localhost:8443/gateway/proxy-token/health/v1/gateway-status
> HTTP/1.1 200 OK
> Date: Mon, 29 Apr 2024 08:33:06 GMT
> Content-Length: 0
> {noformat}
> *Expected results:*
> An HTTP response should have been received with 401 and the proper error 
> message.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

Reply via email to