Browse Source

Fix typo in HTTP Basic Auth Provider documentation

The documentation states that setting the header `X-Requested-By` will remove the `WWW-Authenticate` header from the response.
However, after testing this and reading the library code it looks like the header to set is `X-Requested-With` (X-Requested-By is mentioned nowhere except in this documentation file), so I propose this simple PR to fix this.

Signed-off-by: Martin Boulais <31805063+martinboulais@users.noreply.github.com>
pull/18123/head
Martin Boulais 2 months ago committed by GitHub
parent
commit
90ebfa129f
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
  1. 2
      docs/modules/ROOT/pages/servlet/authentication/passwords/basic.adoc

2
docs/modules/ROOT/pages/servlet/authentication/passwords/basic.adoc

@ -24,7 +24,7 @@ The `RequestCache` is typically a `NullRequestCache` that does not save the requ
[NOTE] [NOTE]
==== ====
The default HTTP Basic Auth Provider will suppress both Response body and `WWW-Authenticate` header in the 401 response when the request was made with a `X-Requested-By: XMLHttpRequest` header. The default HTTP Basic Auth Provider will suppress both Response body and `WWW-Authenticate` header in the 401 response when the request was made with a `X-Requested-With: XMLHttpRequest` header.
This allows frontends to implement their own authentication code, instead of triggering the browser login dialog. This allows frontends to implement their own authentication code, instead of triggering the browser login dialog.
To override, implement your own javadoc:org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint[]. To override, implement your own javadoc:org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint[].
==== ====

Loading…
Cancel
Save