[jboss-jira] [JBoss JIRA] Resolved: (JBPORTAL-2471) WSRP Producer portlet resources are not proxied through the Consumer Portlet
Chris Laprun (JIRA)
jira-events at lists.jboss.org
Thu Apr 8 12:56:37 EDT 2010
[ https://jira.jboss.org/jira/browse/JBPORTAL-2471?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Chris Laprun resolved JBPORTAL-2471.
------------------------------------
Fix Version/s: 2.7.3 Final
Resolution: Done
Should be done but would like more feedback if possible.
> WSRP Producer portlet resources are not proxied through the Consumer Portlet
> ----------------------------------------------------------------------------
>
> Key: JBPORTAL-2471
> URL: https://jira.jboss.org/jira/browse/JBPORTAL-2471
> Project: JBoss Portal
> Issue Type: Bug
> Security Level: Public(Everyone can see)
> Components: Portal WSRP
> Affects Versions: 2.7.2 Final
> Environment: Setup an aggregation tier Portal with a WSRP Consumer portlet configured to look at another service tier Portal with a remotable portlet (WSRP Producer)
> Reporter: Mat Allen
> Assignee: Chris Laprun
> Fix For: 2.7.3 Final
>
>
> When a browser requests the WSRP Consumer, the aggregation layer Portal proxies the request to the WSRP Producer (service layer Portal) providing the html back to the browser. The problem is that the resource url's (images, css and js) in the html all contain direct url's to the Producer server/portlet, when they should be being proxied through the Consumer Portlet either through a resource serving portlet or better still, a restful url to support further relative resources.
> The issue can be seen clearly when using Firefox with the Firebug plugin to view the http requests.
> The WSRP spec (1.0 and 2.0) states that if a Producer and Consumer are divided by a firewall, a client browser would still be able to use the portlet:
> http://docs.oasis-open.org/wsrp/v2/wsrp-2.0-spec-os-01.html#_URL_Considerations
> search for "the Producer may be shielded from the client via a firewall"
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the jboss-jira
mailing list