solid-contrib / web-access-control-tests

Tests if a Solid server implements web access control correctly
MIT License
2 stars 5 forks source link

add tests for public and logged_in #28

Closed bourgeoa closed 3 years ago

bourgeoa commented 3 years ago

I read-public.test.ts I had to replace some 403 with 4xx. NSS is returning 401 and I don't know what the good result is.

michielbdejong commented 3 years ago

Yes, I think if no Authorization header is sent then the response would be 401, and if the Authorization header that was sent is insufficiently powerful, then it would be 403.