Uploaded image for project: 'jBPM'
  1. jBPM
  2. JBPM-7952

WebSocket session invalidation fix not included in RHDM product builds

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Done
    • Icon: Blocker Blocker
    • 7.15.0.Final
    • 7.14.0.Final
    • Controller
    • None
    • 1
    • NEW
    • NEW
    • 2018 Week 45-47

      The web.xml introduction of the WebSocket Basic Auth Filter, which is the fix made in JBPM-7902, appears in Business Central nightly product builds, but not in Decision Central nightly product builds.

      RHPAM has this (correct):

        <filter>
          <filter-name>HTTP Basic Auth Filter</filter-name>
          <filter-class>org.uberfire.ext.security.server.BasicAuthSecurityFilter</filter-class>
          <init-param>
            <param-name>realmName</param-name>
            <param-value>KIE Workbench Realm</param-value>
          </init-param>
        </filter>
        <filter-mapping>
          <filter-name>HTTP Basic Auth Filter</filter-name>
          <url-pattern>/rest/*</url-pattern>
          <url-pattern>/maven2/*</url-pattern>
          <url-pattern>/ws/*</url-pattern>
        </filter-mapping>
        <filter>
          <filter-name>WebSocket Basic Auth Filter</filter-name>
          <filter-class>org.uberfire.ext.security.server.BasicAuthSecurityFilter</filter-class>
          <init-param>
            <param-name>realmName</param-name>
            <param-value>KIE Workbench Realm</param-value>
          </init-param>
          <init-param>
            <param-name>invalidate</param-name>
            <param-value>false</param-value>
          </init-param>
        </filter>
        <filter-mapping>
          <filter-name>WebSocket Basic Auth Filter</filter-name>
          <url-pattern>/websocket/*</url-pattern>
        </filter-mapping>
      

      RHDM still has this (incorrect):

        <filter>
          <filter-name>HTTP Basic Auth Filter</filter-name>
          <filter-class>org.uberfire.ext.security.server.BasicAuthSecurityFilter</filter-class>
          <init-param>
            <param-name>realmName</param-name>
            <param-value>KIE Workbench Realm</param-value>
          </init-param>
        </filter>
        <filter-mapping>
          <filter-name>HTTP Basic Auth Filter</filter-name>
          <url-pattern>/rest/*</url-pattern>
          <url-pattern>/maven2/*</url-pattern>
          <url-pattern>/websocket/*</url-pattern>
        </filter-mapping>
      

              cnicolai@redhat.com Cristiano Nicolai (Inactive)
              dward-se-jboss David Ward
              Juraj Soltes Juraj Soltes (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

                Created:
                Updated:
                Resolved: