- assigned_to: nobody --> catoolsen
from http://www.w3.org/Protocols/rfc2616/rfc2616.html
If the [302 or 307] status code is received in response
to a request other than GET or HEAD, the user agent
MUST NOT automatically redirect the request unless it
can be confirmed by the user, since this might change
the conditions under which the request was issued.
Furthermore even Axis ignores 302. If moria is going
to use a redirect for a WebService use 307.
The WS-I Basic Profile 1.0
<http://ws-i.org/Profiles/Basic/2003-08/BasicProfile-1.0a.htm#refinement28139376>
says implementations /may/ use 307 as the redirect
code, not the 302 code. So the fact that both .NET and
Axis ignore the 302 is correct.
Getting out internal security folks (who configure our
proxy server) to allow a 307 redirect will be an easier
sell than a 302... which is not allowed by standard.