[daisy] [JIRA] Resolved: (DSY-638) Security fix: make username and password required.

[Karel Vervaeke (JIRA)]

     [ http://issues.cocoondev.org//browse/DSY-638?page=all ]
     
Karel Vervaeke resolved DSY-638:
--------------------------------

    Fix Version: 2.3
     Resolution: Fixed
      Assign To: Karel Vervaeke

Resolved in this revision: http://svn.cocoondev.org/viewsvn?view=rev&revision=4724

> Security fix: make username and password required.
> --------------------------------------------------
>
>          Key: DSY-638
>          URL: http://issues.cocoondev.org//browse/DSY-638
>      Project: Daisy
>         Type: Bug
>     Reporter: Karel Vervaeke
>     Assignee: Karel Vervaeke
>     Priority: Minor
>      Fix For: 2.3
>  Attachments: improved_auth_security.patch
>
> Normally, it is the task of the AuthenticationSchemes to check username and password.
> To prevent unwanted behaviour from certain authentication schemes, we should never send empty username and passwords to the authentication schemes.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.cocoondev.org//secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira