mrmap-community / Mapbender2.8

Other
4 stars 1 forks source link

removing the forceBasicAuth=true parameter #75

Open SvenTUM opened 3 years ago

SvenTUM commented 3 years ago

Status Quo

When accessing secured services from a GIS it is mandatory for the user to provide http basic or http digest authorization. If the user so chooses to use http basic adding forceBasicAuth=true to the query string is necessary.

Improvement

Removing the parameter entirely. http basic should be recognized by the header itself.

Reasoning

  1. the very header containing the user information has the method in it, the parameter is redundant
  2. the parameter is extra work and complicates things for users and support
  3. the parameter is an unnecessary point of failure