On 11/02/2013 20:14, Brad McEvoy wrote:
> Hi,
> 
> I'm the author of milton.io, a webdav server library.
> 
> Many webdav clients use the Expect header with value of Continue, for
> the purpose of validating authorisation, and if necessary challenging
> for a login, prior to uploading files. Unfortunately tomcat sends the
> 100 Continue response (so the client continues the upload) before
> invoking the servlet so the semantics of that header are broken, and any
> possible benefit is lost.
> 
> I found this discussion from some years ago:
> http://mail-archives.apache.org/mod_mbox/tomcat-users/200609.mbox/%3cc7eb567e0609050746m296ecf19jce1d3dbf54aa0...@mail.gmail.com%3E
> 
> 
> With this as the conclusion by Bill Barker
> "it's not a parameter, and never will be. Sending "100 Continue" is
> required
> by the HTTP/1.1 RFC, so Tomcat does that."
> 
> Has there been any progress with this?

No movement I am aware of.

> Can anyone suggest a way to
> disable this "feature" short of hacking tomcat?

You don't want to disable sending 100 Continue responses.

Ideally, you want to delay when it is sent until after any
authentication (so the 401 goes back to the client before they send the
body).

I'm not sure how feasible that would be.

Is your servlet generating the 401? It it was a standard authenticator
generating the 401 it might be doable. If it is a user servlet then that
is going to be trickier. It doesn't help that the Servlet API has no
mechanism for sending a 101.

Mark


---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org
For additional commands, e-mail: users-h...@tomcat.apache.org

Reply via email to