IBM Support

PI41467: AUTHORIZATION FLOW CALLBACKS ARE CALLED IN CLIENT'S CODE.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • the client's delegate callback methods (i.e. didReceiveResonse,
    didReceiveData, ...) got called
    when the server returned HTTP status 401 which will initiate the
    authorization process.
    This is not the desired behavior! The client's code shouldn't be
    aware of the authorization process at all, but only
    to get notified weither it was failed, or in case it succeeded,
    get the original resource response, whatever that was.
    Note that in each callback method below, we check for this flag
    and if it is set to YES, we won't deliver the
    event to the client delegate code.
    

Local fix

  • Cancel the connection upon start of authorization process
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * Users who use NSURLConnectionDataDelegate accessing secured  *
    * resource and implement didReceiveData                        *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * Part of the authorization flow was exposed to the user's     *
    * delegate, thus corrupting the data.                          *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * -                                                            *
    ****************************************************************
    

Problem conclusion

  • The code was fixed to handle the authorization flow before
    calling the user's didReceiveData
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI41467

  • Reported component name

    WL/MFPF CONSUME

  • Reported component ID

    5725I4301

  • Reported release

    700

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2015-05-20

  • Closed date

    2015-05-31

  • Last modified date

    2015-05-31

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WL/MFPF CONSUME

  • Fixed component ID

    5725I4301

Applicable component levels

  • R700 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSZH4A","label":"IBM Worklight"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"700","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
14 October 2021