Skip to content

Conversation

@markekraus
Copy link
Contributor

closes #5112

  • Adds an error when a user tries to use -Credential (legacy usage without -Authentication) or -UseDefaultCredentials over a non-HTTPS URI
  • User can Bypass error with -AllowUnencryptedAuthentication
  • -UseDefaultCredentials can only be reliably tested on Windows as support on other platforms depends on a kerberos infrastructure.
  • Adds /Auth/ tests to WebListener for challenge authentication Basic, Negotiate, and NTLM

Incidentally, this increases test coverage for the web cmdlets as -Credential and -UseDefaultCredentials were not being tested.

@SteveL-MSFT
Copy link
Member

@markekraus you added mock NTLM support in the weblistener but didn't use it?

@markekraus
Copy link
Contributor Author

@SteveL-MSFT whoops. NTLM tests added.

Copy link
Member

@SteveL-MSFT SteveL-MSFT left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@SteveL-MSFT
Copy link
Member

This breaking change was approved by @PowerShell/powershell-committee

@daxian-dbw daxian-dbw merged commit ee7edb7 into PowerShell:master Nov 10, 2017
@markekraus markekraus deleted the WebCmdletsCredHttpErr branch January 19, 2018 19:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Breaking-Change breaking change that may affect users

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Web Cmdlets should warn when legacy -Credential is sent over unencrypted connections

3 participants