{"action":"opened","issue":{"url":"https://api.github.com/repos/eXist-db/documentation/issues/249","repository_url":"https://api.github.com/repos/eXist-db/documentation","labels_url":"https://api.github.com/repos/eXist-db/documentation/issues/249/labels{/name}","comments_url":"https://api.github.com/repos/eXist-db/documentation/issues/249/comments","events_url":"https://api.github.com/repos/eXist-db/documentation/issues/249/events","html_url":"https://github.com/eXist-db/documentation/issues/249","id":329757232,"node_id":"MDU6SXNzdWUzMjk3NTcyMzI=","number":249,"title":"XQueryURLRewrite-Servlet initiates AuthorizationChallange when using external HTTP Basic-Authorization","user":{"login":"move[bot]","id":33596368,"node_id":"MDM6Qm90MzM1OTYzNjg=","avatar_url":"https://avatars1.githubusercontent.com/in/6673?v=4","gravatar_id":"","url":"https://api.github.com/users/move%5Bbot%5D","html_url":"https://github.com/apps/move","followers_url":"https://api.github.com/users/move%5Bbot%5D/followers","following_url":"https://api.github.com/users/move%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/move%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/move%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/move%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/move%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/move%5Bbot%5D/repos","events_url":"https://api.github.com/users/move%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/move%5Bbot%5D/received_events","type":"Bot","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-06-06T08:06:43Z","updated_at":"2018-06-06T08:06:43Z","closed_at":null,"author_association":"NONE","body":"*@floerke commented on May 8, 2018, 8:36 AM UTC:*\n\nHi eXist-Team,\n\n### What is the problem\n\nIf you have an external HTTP Basic-Authorization for your xquery-Application, eXist will send another HTTP-Basic Authorization to the user. The `XQueryURLRewrite` Servlet uses the `BasicAuthenticator` to check the \"external HTTP Basic-Authorization\" and will fail, because the external user is not known within eXist.\n\n### My wishes\n\nA servlet parameter that makes the hard coded `true` within the `XQueryURLRewrite` Servlet would be fine.\n\n```java\nrequestUser = authenticator.authenticate(request, response, true);\n```\n\n=>\n\n```java\nrequestUser = authenticator.authenticate(request, response, sendChallenge);\n```\n\nBest regards,\n\nHolger\n\n*This issue was moved by [duncdrum](https://github.com/duncdrum) from eXist-db/exist/issues/1861.*"}}
{"actor":{"display_login":"move"}}