Mantis - Resin
Viewing Issue Advanced Details
ID: Category: Severity: Reproducibility: Date Submitted: Last Update:
5235 minor always 10-08-12 10:34 09-08-14 17:40
Reporter: alex Platform:  
Assigned To: ferg OS:  
Priority: normal OS Version:  
Status: closed Product Version: 4.0.32  
Product Build: Resolution: no change required  
Projection: none      
ETA: none Fixed in Version:  
Summary: 0005235: /resin-admin authenticator chain does not work
Description:   <resin:LoginList>
    <resin:FormLogin login-page="/login.php"
                     error-page="/error.php"
                     authenticator="#{resinAdmin}"/>
    <resin:BasicLogin authenticator="#{resinAdmin}"/>

  </resin:LoginList>
Steps To Reproduce:
Additional Information: Issuing curl -u admin:admin http://localhost:8080/resin-admin/rest.php?q=check_thread_pool [^]
returns
<html>
<head><title>403 Forbidden</title></head>
<body>
<h1>403 Forbidden</h1>

<hr />
<small>
Resin/4.0.30
Server: 'app-0'
</small>
</body></html>

workaround: move BasicLogin to the first position

  <resin:LoginList>
    <resin:BasicLogin authenticator="#{resinAdmin}"/>

    <resin:FormLogin login-page="/login.php"
                     error-page="/error.php"
                     authenticator="#{resinAdmin}"/>

  </resin:LoginList>

Relationships
Attached Files:

There are no notes attached to this issue.