Message Title

Alexander Papadakis created an issue

PLINK-554

Issue Type:	Bug
Affects Versions:	PLINK_2.6.0.Final
Assignee:	Pedro Igor
Components:	Federation
Created:	22/Aug/14 6:07 AM
Priority:	Major
Reporter:	Alexander Papadakis
Security Level:	Public (Everyone can see)

Using the following jboss-web.xml, the hosted page breaks

 
                                                    <jboss-web>
  <security-domain>idp</security-domain>
  <context-root>idp</context-root>
   <valve>
      <class-name>org.jboss.as.web.security.ExtendedFormAuthenticator</class-name>
		<param>
			<param-name>changeSessionIdOnAuthentication</param-name>
			<param-value>true</param-value>
		</param>	  
    </valve>
  <valve>
     <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name>
   </valve>	
</jboss-web>
 
                                                

In chrome you get the following warnings:

 
                                                    Resource interpreted as Image but transferred with MIME type text/plain: "http://localhost:8080/idp/images/picketlink-banner-1180px.png". localhost/:32
Resource interpreted as Stylesheet but transferred with MIME type text/plain: "http://localhost:8080/idp/css/idp.css".

The content of those two files (css, image) is the hosted page html.

By reversing the order, everything works:

 
                                                    <jboss-web>
  <security-domain>idp</security-domain>
  <context-root>idp</context-root>
  <valve>
     <class-name>org.picketlink.identity.federation.bindings.tomcat.idp.IDPWebBrowserSSOValve</class-name>
   </valve>	

   <valve>
      <class-name>org.jboss.as.web.security.ExtendedFormAuthenticator</class-name>
		<param>
			<param-name>changeSessionIdOnAuthentication</param-name>
			<param-value>true</param-value>
		</param>	  
    </valve>
</jboss-web>
 
                                                

Add Comment

This message was sent by Atlassian JIRA