From: <bugzilla-daemon_at_java.net>
Date: Tue, 12 Feb 2013 22:00:01 +0000

http://java.net/bugzilla/show_bug.cgi?id=4671

             Bug #: 4671
           Summary: servlet profile does not profile the use of the spi
                    under HttpServletRequest#authenticate
    Classification: Unclassified
           Product: jaspic-spec
           Version: 1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: normal
          Priority: P5
         Component: source
        AssignedTo: monzillo_at_java.net
        ReportedBy: monzillo_at_java.net
                CC: issues_at_jaspic-spec.java.net


when jsr 196 is configured for a Servlet application, the jsr 196 configuration
must be applied when HttpServletRequest#authenticate is called.

In that case, a call to HttpServletRequest#login must throw an exception since
the configured authentication mechanism may not be password based.

the servlet profile must also define what happens when
HttpServletRequest#logout is called

-- 
Configure bugmail: http://java.net/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.