Hi,

I did a bit more investigation and I believe the following code change should be made to Keycloak to handle this scenario:

In FilterSessionStore.java

we need to change the getDateHeader() method to (after cleanup of comments of course):

@Override
public long getDateHeader(String name) {
   if (!needRequestRestore) return super.getDateHeader(name);
   /*throw new RuntimeException("This method is not supported in a restored authenticated request");*/
    return -1; //http://docs.oracle.com/javaee/7/api/javax/servlet/http/HttpServletRequest.html specifies that if it isn't present, return -1.
}

This is because of the JEE spec that says that if an implementation cannot get the Date Header, it should return -1

http://docs.oracle.com/javaee/7/api/javax/servlet/http/HttpServletRequest.html#getDateHeader-java.lang.String-

Could someone look into this please?

Thanks,

Regards,

Akshay

On Thu, Jan 7, 2016 at 9:08 AM, Akshay Kini <kga.official@gmail.com> wrote:

Hi Folks,

We have configured Keycloak as an SP via filter.
Keycloak Version 1.7.0

We get this exception:
ERROR [org.apache.catalina.core.ContainerBase.[jboss.web].[localhost].[/].[AppName]] Servlet.service() for servlet NasDefault threw exception: java.lang.RuntimeException: This method is not supported in a restored authenticated request
    at org.keycloak.adapters.servlet.FilterSessionStore$1.getDateHeader(FilterSessionStore.java:178) [:1.7.0.CR1]
    at org.apache.catalina.servlets.DefaultServlet.checkIfModifiedSince(DefaultServlet.java:1731) [:]
    at org.apache.catalina.servlets.DefaultServlet.checkIfHeaders(DefaultServlet.java:608) [:]
    at org.apache.catalina.servlets.DefaultServlet.serveResource(DefaultServlet.java:714) [:]
    at org.apache.catalina.servlets.DefaultServlet.doGet(DefaultServlet.java:368) [:]
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:734) [:1.0.0.Final]
    at javax.servlet.http.HttpServlet.service(HttpServlet.java:847) [:1.0.0.Final]
    at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:324) [:]
    at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:242) [:]
... (trimmed)
...
    at org.keycloak.adapters.saml.servlet.SamlFilter.doFilter(SamlFilter.java:125) [:1.7.0.CR1]
...(trimmed)
...
etc.

Any ideas on what this error means?

Thanks,
Regards,
Akshay