From c4907adc0a4ce558a2d56535c39e13b811f0b2b7 Mon Sep 17 00:00:00 2001 From: Kjetil Kjernsmo Date: Fri, 19 Nov 2021 00:23:29 +0100 Subject: [PATCH 1/2] Remove the restriction on Allow for only authorized requests --- protocol.html | 2 -- 1 file changed, 2 deletions(-) diff --git a/protocol.html b/protocol.html index 19b61453..1de35cb2 100644 --- a/protocol.html +++ b/protocol.html @@ -681,8 +681,6 @@

Reading Resources

Servers MUST support the HTTP GET, HEAD and OPTIONS methods [RFC7231] for clients to read resources or to determine communication options. [Source]

-

When responding to authorized requests:

-

Servers MUST indicate their support for HTTP Methods by responding to HTTP GET and HEAD requests for the target resource with the HTTP Method tokens in the HTTP response header Allow.

Servers MUST indicate supported media types in the HTTP Accept-Patch [RFC5789], Accept-Post [LDP] and Accept-Put [The Accept-Put Response Header] response headers that correspond to acceptable HTTP methods listed in Allow header value in response to HTTP GET and HEAD requests.

From 583191cb27e51c92982b32d88b3c0b12a04fa723 Mon Sep 17 00:00:00 2001 From: Kjetil Kjernsmo Date: Mon, 22 Nov 2021 09:28:55 +0100 Subject: [PATCH 2/2] Move authorization requirement to be concerned about Accept --- protocol.html | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/protocol.html b/protocol.html index 1de35cb2..327e9cb6 100644 --- a/protocol.html +++ b/protocol.html @@ -683,7 +683,7 @@

Reading Resources

Servers MUST indicate their support for HTTP Methods by responding to HTTP GET and HEAD requests for the target resource with the HTTP Method tokens in the HTTP response header Allow.

-

Servers MUST indicate supported media types in the HTTP Accept-Patch [RFC5789], Accept-Post [LDP] and Accept-Put [The Accept-Put Response Header] response headers that correspond to acceptable HTTP methods listed in Allow header value in response to HTTP GET and HEAD requests.

+

When responding to authorized requests, servers MUST indicate supported media types in the HTTP Accept-Patch [RFC5789], Accept-Post [LDP] and Accept-Put [The Accept-Put Response Header] response headers that correspond to acceptable HTTP methods listed in Allow header value in response to HTTP GET and HEAD requests.

Servers MAY include the HTTP Accept-Patch, Accept-Post and Accept-Put headers in the response of a OPTIONS * request.