[jira] [Comment Edited] (OFBIZ-9206) Login and logout process in demo backends (Management Apps) shows a certificate issue

[Nicolas Malin (Jira)]

    [ https://issues.apache.org/jira/browse/OFBIZ-9206?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15890696#comment-15890696 ]

Jacques Le Roux edited comment on OFBIZ-9206 at 3/1/17 6:06 PM:
----------------------------------------------------------------

Fixed in trunk at r1784930.

But this is very dissapointing because unlike locally (cf OFBIZ-9240) login out shows a 404 page with ecomseo and a blank page for ecommerce.

It's even incomprehensible for me so far. For instance have a look at those simplified snippets from access and console logs:
{code}
[01/Mar/2017:15:23:55 +0000] "GET /ecomseo/ HTTP/1.1" 200 105021 "-"
[01/Mar/2017:15:23:56 +0000] "GET /content/contentForum.css HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/additem"
[01/Mar/2017:15:23:56 +0000] "POST /ecomseo/additem HTTP/1.1" 200 111589 "https://demo-trunk.ofbiz.apache.org/ecomseo/"
[01/Mar/2017:15:23:56 +0000] "GET /content/control/main HTTP/1.1" 200 8946 "https://demo-trunk.ofbiz.apache.org/ecomseo/additem"
[01/Mar/2017:15:23:58 +0000] "GET /ecomseo/quickcheckout HTTP/1.1" 200 10396 "https://demo-trunk.ofbiz.apache.org/ecomseo/additem"
[01/Mar/2017:15:23:58 +0000] "GET /content/contentForum.css HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:23:58 +0000] "GET /content/control/main HTTP/1.1" 200 8946 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "POST /ecomseo/login HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "GET /ecomseo/quickcheckout HTTP/1.1" 200 28992 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "GET /content/contentForum.css HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "GET /content/control/main HTTP/1.1" 200 8946 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:12 +0000] "GET /ecomseo/logout HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:12 +0000] "GET /ecomseo/ HTTP/1.1" 404 236 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
{code}

{code}
2017-03-01 15:23:55,147 |ajp-nio-8009-exec-1  |ControlServlet                |T| [[[main(Domain:https://demo-trunk.ofbiz.apache.org)] Request Done- total:1.671,since last([main(Domain:http...):1.671]]
2017-03-01 15:23:55,147 |ajp-nio-8009-exec-1  |SeoContextFilter              |W| [Filtered request]: /ecomseo/
2017-03-01 15:23:55,592 |http-nio-8443-exec-8 |ControlEventListener          |I| Creating session:  hidden sessionId by default.
2017-03-01 15:23:55,592 |http-nio-8443-exec-8 |ControlServlet                |T| [[[setSessionTimeZone(Domain:https://demo-trunk-ofbiz.apache.org)] Request Begun, encoding=[UTF-8]- total:0.0,since last(Begin):0.0]]
[...]
2017-03-01 15:24:12,759 |ajp-nio-8009-exec-8  |ControlServlet                |T| [[[logout(Domain:https://demo-trunk.ofbiz.apache.org)] Request Done- total:0.021,since last([logout(Domain:ht...):0.021]]
2017-03-01 15:24:12,834 |ajp-nio-8009-exec-10 |SeoContextFilter              |I| Can NOT forward this url: /ecomseo/
{code}
Have a look at console.log-trunk.txt.zip and access_log-trunk.txt for more.

Anyway this should not block us to use a certificate for at least trunk and stable as a start.
So I'll also commit stable and will work on OFBIZ-9240 locally to try to understand they underlying reason which seems to lay in SeoContextFilter class. I have tried to tweak SeoConfig.xml w/o results.


was (Author: jacques.le.roux):
Fixed in trunk at r1784930.

But this is very dissapointing because unlike locally (cf OFBIZ-9240login out shows a 404 page with ecomseo and a blank page for ecommerce.

It's even incomprehensible for me so far. For instance have a look at those simplifiedf snippets from access and console logs:
{code}
[01/Mar/2017:15:23:55 +0000] "GET /ecomseo/ HTTP/1.1" 200 105021 "-"
[01/Mar/2017:15:23:56 +0000] "GET /content/contentForum.css HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/additem"
[01/Mar/2017:15:23:56 +0000] "POST /ecomseo/additem HTTP/1.1" 200 111589 "https://demo-trunk.ofbiz.apache.org/ecomseo/"
[01/Mar/2017:15:23:56 +0000] "GET /content/control/main HTTP/1.1" 200 8946 "https://demo-trunk.ofbiz.apache.org/ecomseo/additem"
[01/Mar/2017:15:23:58 +0000] "GET /ecomseo/quickcheckout HTTP/1.1" 200 10396 "https://demo-trunk.ofbiz.apache.org/ecomseo/additem"
[01/Mar/2017:15:23:58 +0000] "GET /content/contentForum.css HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:23:58 +0000] "GET /content/control/main HTTP/1.1" 200 8946 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "POST /ecomseo/login HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "GET /ecomseo/quickcheckout HTTP/1.1" 200 28992 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "GET /content/contentForum.css HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:05 +0000] "GET /content/control/main HTTP/1.1" 200 8946 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:12 +0000] "GET /ecomseo/logout HTTP/1.1" 302 - "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
[01/Mar/2017:15:24:12 +0000] "GET /ecomseo/ HTTP/1.1" 404 236 "https://demo-trunk.ofbiz.apache.org/ecomseo/quickcheckout"
{code}

{code}
2017-03-01 15:23:55,147 |ajp-nio-8009-exec-1  |ControlServlet                |T| [[[main(Domain:https://demo-trunk.ofbiz.apache.org)] Request Done- total:1.671,since last([main(Domain:http...):1.671]]
2017-03-01 15:23:55,147 |ajp-nio-8009-exec-1  |SeoContextFilter              |W| [Filtered request]: /ecomseo/
2017-03-01 15:23:55,592 |http-nio-8443-exec-8 |ControlEventListener          |I| Creating session:  hidden sessionId by default.
2017-03-01 15:23:55,592 |http-nio-8443-exec-8 |ControlServlet                |T| [[[setSessionTimeZone(Domain:https://demo-trunk-ofbiz.apache.org)] Request Begun, encoding=[UTF-8]- total:0.0,since last(Begin):0.0]]
[...]
2017-03-01 15:24:12,759 |ajp-nio-8009-exec-8  |ControlServlet                |T| [[[logout(Domain:https://demo-trunk.ofbiz.apache.org)] Request Done- total:0.021,since last([logout(Domain:ht...):0.021]]
2017-03-01 15:24:12,834 |ajp-nio-8009-exec-10 |SeoContextFilter              |I| Can NOT forward this url: /ecomseo/
{code}


Have a look at console.log-trunk.txt.zip and access_log-trunk.txt for more.

Anyway this should not block us to use a certificate. So I'll also commit stable and will work on OFBIZ-9240 locally to try to understand they underlying reason which seems to lay in SeoContextFilter class. I have tried to tweak SeoConfig.xml w/o results.

> Login and logout process in demo backends (Management Apps) shows a certificate issue
> -------------------------------------------------------------------------------------
>
>                 Key: OFBIZ-9206
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-9206
>             Project: OFBiz
>          Issue Type: Bug
>          Components: Demo
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Minor
>         Attachments: access_log-trunk.txt, console.log-trunk.txt.zip, OFBIZ-9206.patch, ofbiz-vm2.apache.org.yaml
>
>
> When, from the site main page http://ofbiz.apache.org/, you get to the demos depending on browser (tested on Windows 7) you get some issues:
> * FF
> ** Management Apps: OK
> ** Ecommerce: OK
> * Chrome (Management Apps or Ecommerce)
> ** stable: OK
> ** old: KO - If you copy the URL by hand it works, and after even from the main page it works.
> ** trunk: OK
> * IE, same than Chrome
> If, from any browser, you logout from Management Apps you get a certificate issue. Actually as we use HSTS the browsers protect us from any 3rd party intrusions... Same issue when login in.
> So it seems we have a certificate issue after OFBIZ-7928 and INFRA-11960. Maybe it's due to how OFBiz redirects when login in or login out because, so far, only the login page is concerned...

--
This message was sent by Atlassian JIRA
(v6.3.15#6346)