zalando-stups / hutmann

Simple OAuth2 for Play! backend services
Other
3 stars 6 forks source link

Request body is parsed before authentication #8

Closed sharma-rohit closed 7 years ago

sharma-rohit commented 7 years ago

Scenario: I had an issue when using multipart form data as request body, The content of the files were streamed from a client which were processed in application and stored in database.

The problem is even if the request was unauthorized, request body is parsed completely which in turn modifies database state and response code still is 401(Unauthorized)

musiKk commented 7 years ago

Released with 2.5.3.