PI47854: HEADER-BASED AUTHENTICATION FAILURE - HEADER NOT FOUND IN REQUEST

IBM MobileFirst Platform Foundation Interim Fix README for 7.1
IBM MobileFirst Platform Foundation Interim Fix README for 7.0

APAR status

• Closed as program error.

Error description

• Matching request headers is designed to be case-insensitive. The
  MFP HeaderBaseAuthentication is case-sensitive.
  This can cause some requests with custom headers not to be found
  on the server.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * developers who use the predefined  Header Based              *
  * Authentication.                                              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * MFP Header Based Authentication is case-sensitive, which is  *
  * not compliant to the HTTP spec.                              *
  * In Some cases, this may cause Header Based Authentication to *
  * fail due to missing header (caused by case mismatch)         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * -                                                            *
  ****************************************************************
  

Problem conclusion

• The code was modified so  that Header Based Authentication will
  be case-insensitive, in accordance to the HTTP spec.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  MFPF/WORKLIGHT

• Fixed component ID

  5725I4301

Applicable component levels

• R700 PSY

     UP

• R710 PSY

     UP