From 6f1844199d769b8d2ef3ead1ccab1ec36eb0f288 Mon Sep 17 00:00:00 2001 From: Alinga Yeung <Alinga.Yeung@nrc-cnrc.gc.ca> Date: Mon, 10 Aug 2015 15:17:47 -0700 Subject: [PATCH] Story ac2. Updated after Brian's code review comments. --- .../src/ca/nrc/cadc/ac/server/web/users/PasswordServlet.java | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/PasswordServlet.java b/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/PasswordServlet.java index a7979bbd..141a0ae0 100644 --- a/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/PasswordServlet.java +++ b/projects/cadcAccessControl-Server/src/ca/nrc/cadc/ac/server/web/users/PasswordServlet.java @@ -97,7 +97,6 @@ public class PasswordServlet extends HttpServlet public void doPost(final HttpServletRequest request, final HttpServletResponse response) throws IOException { - response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR); final long start = System.currentTimeMillis(); final ServletLogInfo logInfo = new ServletLogInfo(request); log.info(logInfo.start()); @@ -106,7 +105,7 @@ public class PasswordServlet extends HttpServlet final Subject subject = AuthenticationUtil.getSubject(request); if ((subject == null) || (subject.getPrincipals(HttpPrincipal.class).isEmpty())) { - logInfo.setMessage("Missing subject"); + logInfo.setMessage("Unauthorized subject"); response.setStatus(HttpServletResponse.SC_UNAUTHORIZED); } else @@ -119,7 +118,6 @@ public class PasswordServlet extends HttpServlet { try { - response.setStatus(HttpServletResponse.SC_OK); final Set<HttpPrincipal> webPrincipals = subject.getPrincipals(HttpPrincipal.class); @@ -174,6 +172,7 @@ public class PasswordServlet extends HttpServlet log.error(message, t); logInfo.setSuccess(false); logInfo.setMessage(message); + response.setStatus(HttpServletResponse.SC_INTERNAL_SERVER_ERROR); } finally { -- GitLab