Bug 1029687

Summary:	[GSS] (6.3) Logout of secured (ssl) admin console setup redirects to http address
Product:	[JBoss] JBoss Enterprise Application Platform 6	Reporter:	Chris Dolphy <cdolphy>
Component:	Web Console	Assignee:	Darran Lofthouse <darran.lofthouse>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Jakub Cechacek <jcechace>
Severity:	urgent	Docs Contact:	Russell Dickenson <rdickens>
Priority:	urgent
Version:	6.2.0	CC:	ahoness, bmaxwell, brian.stansberry, darran.lofthouse, erich, fbogyai, hbraun, jkudrnac, kkhan, krathod, myarboro, smumford
Target Milestone:	DR2
Target Release:	EAP 6.3.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:	In previous versions of JBoss EAP 6, users logging out of a secured administration console (over HTTPS) would be incorrectly redirected to standard HTTP addresses and the logout would fail. This was because the redirects were hardcoded to use HTTP addresses. In this release of the product, the redirects have been updated to take into account if the user is accessing the interface over HTTP or HTTPS and redirect appropriately.	Story Points:	---
Clone Of:
Clones:	1051171 (view as bug list)		Environment:
Last Closed:	2014-06-28 15:28:22 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1051171

Description Chris Dolphy 2013-11-12 22:32:59 UTC

Description of problem:
Logging out of an admin console secured with SSL (on port 9443) redirects to http address (e.g. http://localhost:9443/logout?logout) which leads to a Page Not Found error.


Version-Release number of selected component (if applicable):
EAP 6.2-beta (and 6.1.1)

How reproducible:
reliably

Steps to Reproduce:
1. Setup HTTPS for admin console (I uesd the standalone instructions at  https://access.redhat.com/site/solutions/229963) 
2. Login to admin console (e.g. https://localhost:9443/console)
3. Click logout button and see address bar go to http address.

Actual results:
Page Not Foun

Expected results:
Logout without error.  Not sure that you can logout with basic auth, but at least there shouldn't be the wrong page.

Additional info:

Comment 3 JBoss JIRA Server 2014-01-03 18:19:11 UTC

Darran Lofthouse <darran.lofthouse> updated the status of jira WFLY-2498 to Coding In Progress

Comment 5 FIlip Bogyai 2014-02-24 14:00:58 UTC

Verification on EAP 6.3.0.DR0 failed. The behavior is the same as in comment #1

Comment 6 FIlip Bogyai 2014-02-24 14:47:41 UTC

Source code for 6.3.0.DR0 doesn't contain fix for this issue : https://github.com/jbossas/jboss-eap/pull/748

Comment 7 Kabir Khan 2014-02-25 09:40:42 UTC

Seems I had not merged this anyway. Merged now

Comment 8 FIlip Bogyai 2014-02-26 09:55:41 UTC

Verification on EAP 6.3.0.DR1 failed. This is already merged in 6.x branch, but it didn't get into DR1. I will verify it in DR2.

Comment 9 FIlip Bogyai 2014-03-06 09:51:10 UTC

Verified on EAP 6.3.0.DR2