Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1104679

Summary:	Content referenced from hosted page is not served properly (zero size)
Product:	[JBoss] JBoss Enterprise Application Platform 6	Reporter:	Tom Fonteyne <tfonteyn>
Component:	PicketLink	Assignee:	Pedro Igor <psilva>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Josef Cacek <jcacek>
Severity:	urgent	Docs Contact:	Russell Dickenson <rdickens>
Priority:	urgent
Version:	6.3.0	CC:	bdawidow, fbogyai, tfonteyn
Target Milestone:	---
Target Release:	EAP 6.4.0
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2014-11-07 15:27:00 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Tom Fonteyne 2014-06-04 13:35:37 UTC

Description

When an authorized request comes through for the hosted page resources, eg images, css files, the next valve in the chain is not called. A check should be implemented and if the user is authorized and the request is not a SAML request, then call the next valve in the chain. The hosted page itself is not affected, since it is explicitly served/handled by picketlink IDP valve.

  https://issues.jboss.org/browse/PLINK-412

reproduced on EAP 6.3 ( as per build on 03-june-2014) which uses picketlink 2.5.3.SP5

This needs to be fixed and backported to EAP 6.3 CP01 (as I understand no more blockers accepted for 6.3)

Comment 2 FIlip Bogyai 2014-07-17 12:39:23 UTC

This issue should be fixed in EAP 6.4 release.

Comment 3 JBoss JIRA Server 2014-10-06 15:02:28 UTC

Pedro Igor <pigor.craveiro> updated the status of jira PLINK-412 to Resolved

Comment 4 Pedro Igor 2014-10-30 20:27:56 UTC

Tom,

   Is this still an issue ?

   Also, PL IDP has a limitation where you must use pages in hosted directory in order to provide your welcome files.

Regards.

Comment 6 Tom Fonteyne 2014-11-07 14:46:04 UTC

Tested with EAP 6.4 DR8 with a picture located inside the hosted and with a pic outside that folder.

=> both working fine now !

cheers
Tom

Comment 7 Boleslaw Dawidowicz 2014-11-07 15:27:00 UTC

Thanks Tom!