Bug 1243905

Summary:	[GSS](6.4.z) Regression JAVASERVERFACES-3531 - UnsupportedOperationException in ExternalContext#isSecure when trying to set flash cookie
Product:	[JBoss] JBoss Enterprise Application Platform 6	Reporter:	Brad Maxwell <bmaxwell>
Component:	JSF	Assignee:	baranowb <bbaranow>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Pavol Pitonak <ppitonak>
Severity:	unspecified	Docs Contact:
Priority:	unspecified
Version:	6.4.2	CC:	amelicha, bbaranow, fjuma, istudens, jawilson, manovotn, maschmid, ssilvert
Target Milestone:	CR1	Keywords:	Reopened
Target Release:	EAP 6.4.3
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:
Clones:	1270758 (view as bug list)		Environment:
Last Closed:	2017-01-17 10:44:10 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1231259, 1243911

Description Brad Maxwell 2015-07-16 14:33:20 UTC

Upstream JIRA: https://java.net/jira/browse/JAVASERVERFACES-3531

Was fixed in 2.1.29 (r13370 in https://svn.java.net/svn/mojarra~svn/tags/2.1.29/).  EAP 6.4 has 2.1.28.
(The fix changes com.sun.faces.context.flash.ELFlash to not call isSecure since it doesn't work correctly until JSF 2.2).

The JIRA says it was introduced in 2.1.24, which we pulled in EAP 6.2.2.

Caused by: java.lang.UnsupportedOperationException
  at javax.faces.context.ExternalContext.isSecure(ExternalContext.java:1932) [jboss-jsf-api_2.1_spec-2.1.28.Final-redhat-1.jar:2.1.28.Final-redhat-1]
  at com.sun.faces.context.flash.ELFlash.setCookie(ELFlash.java:956) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at com.sun.faces.context.flash.ELFlash.doLastPhaseActions(ELFlash.java:638) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at com.sun.faces.context.ExternalContextImpl.redirect(ExternalContextImpl.java:581) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at org.apache.deltaspike.jsf.impl.listener.request.DeltaSpikeExternalContextWrapper.redirect(DeltaSpikeExternalContextWrapper.java:56) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at com.sun.faces.application.NavigationHandlerImpl.handleNavigation(NavigationHandlerImpl.java:180) [jsf-impl-2.1.28.redhat-8.jar:2.1.28.redhat-8]
  at org.apache.deltaspike.jsf.impl.config.view.navigation.ViewConfigAwareNavigationHandler.handleNavigation(ViewConfigAwareNavigationHandler.java:146) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.scope.viewaccess.ViewAccessScopedAwareNavigationHandler.handleNavigation(ViewAccessScopedAwareNavigationHandler.java:51) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.navigation.DeltaSpikeNavigationHandler.handleNavigation(DeltaSpikeNavigationHandler.java:77) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.config.view.navigation.DefaultViewNavigationHandler.navigateTo(DefaultViewNavigationHandler.java:41) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at org.apache.deltaspike.jsf.impl.config.view.navigation.DefaultViewNavigationHandler$Proxy$_$$_WeldClientProxy.navigateTo(DefaultViewNavigationHandler$Proxy$_$$_WeldClientProxy.java) [deltaspike-jsf-module-impl-ee6-1.4.1.jar:1.4.1]
  at com.jboss.examples.web.LoginBean.logout(LoginController.java:123) [classes:]

Comment 7 Matej Novotny 2015-08-03 12:44:57 UTC

Verified, works as expected.
Tried with EAP 6.4.2 to reproduce this and verified that the bug is gone with 6.4.3.

Comment 9 Petr Penicka 2017-01-17 10:42:04 UTC

Retroactively bulk-closing issues from released EAP 6.4 cummulative patches.

Comment 10 Petr Penicka 2017-01-17 10:42:09 UTC

Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.

Comment 11 Petr Penicka 2017-01-17 10:44:10 UTC

Retroactively bulk-closing issues from released EAP 6.4 cumulative patches.