Uploaded image for project: 'jBPM'
  1. jBPM
  2. JBPM-7952

WebSocket session invalidation fix not included in RHDM product builds

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Blocker
    • 7.15.0.Final
    • 7.14.0.Final
    • Controller
    • None
    • 1
    • NEW
    • NEW
    • 2018 Week 45-47

    Description

      The web.xml introduction of the WebSocket Basic Auth Filter, which is the fix made in JBPM-7902, appears in Business Central nightly product builds, but not in Decision Central nightly product builds.

      RHPAM has this (correct):

        <filter>
    <filter-name>HTTP Basic Auth Filter</filter-name>
    <filter-class>org.uberfire.ext.security.server.BasicAuthSecurityFilter</filter-class>
    <init-param>
      <param-name>realmName</param-name>
      <param-value>KIE Workbench Realm</param-value>
    </init-param>
  </filter>
  <filter-mapping>
    <filter-name>HTTP Basic Auth Filter</filter-name>
    <url-pattern>/rest/*</url-pattern>
    <url-pattern>/maven2/*</url-pattern>
    <url-pattern>/ws/*</url-pattern>
  </filter-mapping>
  <filter>
    <filter-name>WebSocket Basic Auth Filter</filter-name>
    <filter-class>org.uberfire.ext.security.server.BasicAuthSecurityFilter</filter-class>
    <init-param>
      <param-name>realmName</param-name>
      <param-value>KIE Workbench Realm</param-value>
    </init-param>
    <init-param>
      <param-name>invalidate</param-name>
      <param-value>false</param-value>
    </init-param>
  </filter>
  <filter-mapping>
    <filter-name>WebSocket Basic Auth Filter</filter-name>
    <url-pattern>/websocket/*</url-pattern>
  </filter-mapping>

      RHDM still has this (incorrect):

        <filter>
    <filter-name>HTTP Basic Auth Filter</filter-name>
    <filter-class>org.uberfire.ext.security.server.BasicAuthSecurityFilter</filter-class>
    <init-param>
      <param-name>realmName</param-name>
      <param-value>KIE Workbench Realm</param-value>
    </init-param>
  </filter>
  <filter-mapping>
    <filter-name>HTTP Basic Auth Filter</filter-name>
    <url-pattern>/rest/*</url-pattern>
    <url-pattern>/maven2/*</url-pattern>
    <url-pattern>/websocket/*</url-pattern>
  </filter-mapping>

      Attachments

        Issue Links

          blocks

          Task - Represents a small unit of work that is not end-user facing. KIECLOUD-20 Update RHDM and RHPAM images to be based on EAP 7.2.x

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Closed
          is cloned by

          Bug - A problem that impairs or prevents the functions of the product. RHDM-791 WebSocket session invalidation fix not included in RHDM product builds

          • Blocker - To be worked above all other priorities. This term is chosen when the severity of the issue is very high, has no workaround, or the effort for the change is comparatively low. Issues that may be very publicly visible and could generate significant media attention may also drive a higher priority.
          • Closed
          relates to

          Bug - A problem that impairs or prevents the functions of the product. JBPM-7902 WebSocket session is invalidated when connecting to embedded controller

          • Critical - To be worked on immediately following BLOCKER issues.
          • Resolved

          Activity

            People

              cnicolai@redhat.com Cristiano Nicolai
              dward-se-jboss David Ward
              Juraj Soltes Juraj Soltes (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: