Skip to content

Verify `server` header

Trond Aasan requested to merge BOTTINT-47 into master

https://jira.usit.uio.no/browse/BOTTINT-47

DFØ SAP API sets the Server HTTP header. It is less likely we misinterpret the response when we verify this header. Esp. 404 responses are problematic. If we blindly trust a 404 to mean "Resource not found", a configuration error or an error in the API manager may be misinterpreted as "This person doesn't have any permisjoner" instead of throwing an exception.

Edited by Trond Aasan

Merge request reports