You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
The default HTTP Basic Auth Provider will suppress both Response body and `WWW-Authenticate` header in the 401 response when the request was made with a `X-Requested-By: XMLHttpRequest` header.
28
+
This allows frontends to implement their own authentication code, instead of triggering the browser login dialog.
29
+
To override, implement your own javadoc:org.springframework.security.web.authentication.www.BasicAuthenticationEntryPoint[].
32
30
====
33
31
34
32
When a client receives the `WWW-Authenticate` header, it knows it should retry with a username and password.
0 commit comments