Mailing-List: contact users-help@cxf.apache.org; run by ezmlm
Precedence: bulk
Reply-To: users@cxf.apache.org
Received-SPF: pass (nike.apache.org: domain of sberyozkin@gmail.com designates
 74.125.83.41 as permitted sender)
Message-ID: <4FE3938D.9080109@gmail.com>
Date: Thu, 21 Jun 2012 22:35:09 +0100
From: Sergey Beryozkin <sberyozkin@gmail.com>
User-Agent: Mozilla/5.0 (X11; Linux x86_64;
 rv:12.0) Gecko/20120430 Thunderbird/12.0.1
MIME-Version: 1.0
To: users@cxf.apache.org
CC: semecxf <diata.keita@gmail.com>
Subject: Re: CORS and Http Basic Authentication
References: <1340297547483-5710112.post@n5.nabble.com>
In-Reply-To: <1340297547483-5710112.post@n5.nabble.com>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit

On 21/06/12 17:52, semecxf wrote:
> I have authentication class which implements
> org.apache.cxf.jaxrs.ext.RequestHandler to do authentication.
> My code works fine, except with cors.
> In cors request (AuthorizationPolicy)message.get(AuthorizationPolicy.class)
> returns null therefore I can't get user name and password.
>
> Any body knows how cors and http basic authentication work?
>
this entry provides some useful info:
http://avalanche123.com/blog/2011/10/10/cross-domain-javascript-lessons-learned/

By the way, we may need to enhance the CXF CORS filter to return 
'Access-Control-Allow-Credentials: true' if it's configured to enforce 
BasicAuth and no AuthorizationPolicy is available.

Sergey

> --
> View this message in context: http://cxf.547215.n5.nabble.com/CORS-and-Http-Basic-Authentication-tp5710112.html
> Sent from the cxf-user mailing list archive at Nabble.com.


-- 
Sergey Beryozkin

Talend Community Coders
http://coders.talend.com/

Blog: http://sberyozkin.blogspot.com