Force Basic and Force Digest Auth option are not honored

Issue

• Steps to reproduce:

  1. Configure Digest Authentication:
     1. System Settings > API Authentication > Digest Authentication:
     2. Force Digest Authentication: True
     3. Enabled: True
     4. Hosts Allowed: n/a
     5. URLs Excludes: n/a
     6. URLs Includes: /api/jsonws/company/*
  2. Configure a new System Access Policy:
     1. Name: COMPANY_ACCESS
     2. Enabled: true
     3. Default: false
     4. Title: COMPANY_ACCESS
     5. Allowed Service Signatures:
        1. Service Class: com.liferay.portal.kernel.service.CompanyService
        2. Method Name: n/al
  3. Open a session in POSTMAN
  4. Create a new request this way (select Digest Auth and add the user and pass)
  5. Uncheck the "Yes disable retrying" option
  6. Test that results are returned 
  7. Check the "yes disable retrying" option again (so we are going to see the first call return as result and it's status code)
  8. In  you could see that it is 403 instead of 401

   Expected result: HTTP response returns 401
   Actual result: HTTP response returns 403

Environment

• Liferay DXP 7.3
• Liferay DXP 7.2
• Liferay DXP 7.1

Resolution

• The observed behavior is a known issue and is fixed in liferay-dxp-73-sp3.
• The observed behavior is a known issue and is fixed in liferay-fix-pack-dxp-15 for 7.2.
• The observed behavior is a known issue and is fixed in liferay-fix-pack-dxp-26 for 7.1.
• If the hotfix is required for this issue, please create a support ticket requesting hotfix by attaching patch details.
• Installing Fix Packs and Hotfixes on Liferay DXP will guide to install these Fixpack in your environment.