Uploaded image for project: 'PicketLink'
  1. PicketLink
  2. PLINK-554

IDP Hosted content not server properly if ExtendedFormAuthenticator valve is added before IDPWebBrowserSSOValve

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Minor
    • PLINK_2.7.0.Beta2
    • PLINK_2.6.0.Final
    • SAML
    • None

    Description

      Using the following jboss-web.xml, the hosted page breaks

      <jboss-web>
  <security-domain>idp</security-domain>
  <context-root>idp</context-root>
   <valve>
      <class-name>org.jboss.as.web.security.ExtendedFormAuthenticator</class-name>
		<param>
			<param-name>changeSessionIdOnAuthentication</param-name>
			<param-value>true</param-value>
		</param>	  
    </valve>
  <valve>
     <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name>
   </valve>	
</jboss-web>

      In chrome you get the following warnings:

      Resource interpreted as Image but transferred with MIME type text/plain: "http://localhost:8080/idp/images/picketlink-banner-1180px.png". localhost/:32
Resource interpreted as Stylesheet but transferred with MIME type text/plain: "http://localhost:8080/idp/css/idp.css".

      The content of those two files (css, image) is the hosted page html.

      By reversing the order, everything works:

      <jboss-web>
  <security-domain>idp</security-domain>
  <context-root>idp</context-root>
  <valve>
     <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name>
   </valve>	

   <valve>
      <class-name>org.jboss.as.web.security.ExtendedFormAuthenticator</class-name>
		<param>
			<param-name>changeSessionIdOnAuthentication</param-name>
			<param-value>true</param-value>
		</param>	  
    </valve>
</jboss-web>

      Attachments

        Issue Links

          is related to

          Bug - A problem that impairs or prevents the functions of the product. PLINK-412 Content referenced from hosted page is not served properly (zero size)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. PLINK-413 Hosted page is not served properly (jsp headers not taken into account, served as text)

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Bug - A problem that impairs or prevents the functions of the product. PLINK-558 AbstractIDPValve should always invoke next valve

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Resolved

          Activity

            People

              psilva@redhat.com Pedro Igor Craveiro
              alpapad_jira Alexander Papadakis (Inactive)
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: