1. javaee-security-spec@javaee.groups.io
Topics

Small typo in PRD

Arjan Tijms
 

Hi, noticed the following after a second read:
The Servlet spec, section 14.4 item 18, describes requirements for supporting BASIC and BASIC authentication via the web.xml _login-config_ element. This specification requires that implementations of BASIC and BASIC be made available as _HttpAuthenticationMechanism_ CDI beans. The servlet container is NOT REQUIRED to implement separate and independent mechanisms to satisfy each requirement. Instead, the container MAY choose to provide a single mechanism, for each of BASIC and BASIC,
(emphasis mine)

I think what's meant here is BASIC and FORM, isn't it?

Kind regards,
Arjan Tijms
Arjan Tijms
 

Another typo in the identity store chapter:
An _IdentityStore_ is expected to perform only perform context- and environment-independent processing (for example, verifying usernames and passwords and returning caller data).
Probably should be "to perform only".

Kind regards,
Arjan Tijms
Will Hopkins
 

Fixed both typos; thanks.

On 05/24/2017 07:23 AM, Arjan Tijms wrote:
Another typo in the identity store chapter:
An _IdentityStore_ is expected to perform only perform context- and environment-independent processing (for example, verifying usernames and passwords and returning caller data).
Probably should be "to perform only".

Kind regards,
Arjan Tijms 

-- 
Will Hopkins | WebLogic Security Architect | +1.781.442.0310
Oracle Application Development
35 Network Drive, Burlington, MA 01803

1 - 3 of 3