The GitHub Actions job "CodeQL" on grails-core.git/fix/16632-unauthenticated-request has failed. Run started by GitHub user jdaugherty (triggered by jdaugherty).
Head commit for run: f89943293e20b9689f609e7af60bef34ff56a056 / James Daugherty <[email protected]> Add a functional test for requests without an Authentication (#16632) A filter chain that drops anonymousAuthenticationFilter reaches the filter security interceptor with no Authentication in the security context. The core functional-test-app gains a noAnonymous TESTCONFIG whose Basic Auth and form-login chains drop that filter, and a spec that expects the configured entry point to answer such requests (401 with a Basic challenge, or a redirect to the login page), that valid Basic Auth credentials are still authorized or refused through the same chain, and that a chain which keeps the anonymous filter still serves public URLs. Against the previous compat FilterSecurityInterceptor the two unauthenticated cases fail with a 500, which is the regression the issue reports. The new configuration is added to the securityConfig matrix. Report URL: https://github.com/apache/grails-core/actions/runs/38925315629 With regards, GitHub Actions via GitBox
