770430 - Error 403 with public calendars via caldav

Status: RESOLVED WONTFIX

(Calendar :: Provider: CalDAV, defect)

Description

[Thomas Kempf]

Attachment: Log from Lightning Error Console

User Agent: Mozilla/5.0 (Windows NT 6.0; rv:13.0) Gecko/20100101 Firefox/13.0.1
Build ID: 20120614114901

Steps to reproduce:

Tried to access a public calendar with CalDAV on a DAVICAL Server 1.1.0-1 via the url 
https://kalender.xyz.de:8443/public.php/xxxx/calendar


Actual results:

Got an Error 403 from the Server because Lightning calls OPTIONS on the calendars principal xxxx which is not allowed because with DAVICAL only the complete url https://kalender.xyz.de:8443/public.php/xxxx/calendar is accessible via public.php


Expected results:

If the Authentication Scheme is set to none, Lighning should not call any properties on another url than it is given. Here it should not call Options on the Principal https://kalender.xyz.de:8443/public.php/xxxx when it is given the URL https://kalender.xyz.de:8443/public.php/xxxx/calendar

Comment 1

[Thomas Kempf]

This seems to be a similar bug as Bug 588799, but for public calendars the Errormessage from the server is 403 instead of 404, as there is no user loggedin.

Comment 2

[Philipp Kewisch [:Fallen][📱📆]]

I'd argue that this needs to be fixed in the server configuration. I don't believe there is anything private in the OPTIONS request we are doing. Also, if its a public calendar its probably readonly anyway, so maybe you should subscribe to the .ics feed instead?