Getting error 403 forbidden while using HTTP PUT method

Question

I am using Apache Tomcat 8.0.0-RC3 Server and spring dispatcher servlet . I am getting 403 forbidden while using HTTP PUT method but HTTPGET method is working properly. I am trying to solve this with security constraint but it is giving me 409 conflict error because I am using spring dispatcher servlet and It is not working.But It is working perfect on tomcat 7 .Please help me to get rid of this .

Comments

Per the servlet spec, the default implementation for HttpServlet is to respond to PUT requests with a 405 Method Not Allowed (for HTTP 1.1 connections) or a 400 Bad Request (for all other connections).

You could still be getting a 403 based upon your security constraints. Can you post them here?

Answer 1

Try debugging to find what exact component sets that error code. (See Tomcat FAQ -> troubleshooting)

E.g.
a. Does the call reach DispatcherServlet, or it is rejected before that (e.g. by a security constraint).
b. A breakpoint in Response.sendError() might help.

Tomcat itself has examples that use PUT requests. You may check whether those work in 8.0.0-RC3.

a) Remote API of the Manager web application. It is usually used from Ant tasks. http://tomcat.apache.org/tomcat-8.0-doc/manager-howto.html

b) WebDAV servlet. http://tomcat.apache.org/tomcat-8.0-doc/api/org/apache/catalina/servlets/WebdavServlet.html

Answer 2

As far as I know, Tomcat by default does not accept PUT requests.
(Just think of what it really does; it would be a real security issue if it worked by default).
To accept PUT requests, you need an application that handles such requests specifically.
Can you share your code here?

Answer 3

As far as I know, Tomcat by default does not accept PUT requests. (Just think of what it really does; it would be a real security issue if it worked by default).

To accept PUT requests, you need an application that handles such requests specifically. (For example : DAV). Are you sure that your problem is not because in Tomcat 7 you have an application which accepts PUT requests, but in Tomcat 8 you do not ?