From d37b6a12df5f3e64ef01c704ca7440e6b264d0e0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?S=C3=B6nke=20Hahn?= Date: Fri, 8 Apr 2016 14:49:51 +0800 Subject: [PATCH] update servant-server's changelog for 0.6.1 --- servant-server/CHANGELOG.md | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/servant-server/CHANGELOG.md b/servant-server/CHANGELOG.md index 8b1c25e2..67db6cd0 100644 --- a/servant-server/CHANGELOG.md +++ b/servant-server/CHANGELOG.md @@ -1,3 +1,11 @@ +0.6.1 +----- + +* If servers use the `BasicAuth` combinator and receive requests with missing or + invalid credentials, the resulting error responses (401 and 403) could be + overwritten by subsequent alternative routes. Now `BasicAuth` uses `FailFatal` + and the error responses can't be overwritten anymore. + 0.6 ---