[jboss-jira] [JBoss JIRA] (ELY-1525) When SSO is enabled, multipart form and form enconding stop working.

Martin Weiler (Jira) issues at jboss.org
Mon Jul 8 08:44:00 EDT 2019


    [ https://issues.jboss.org/browse/ELY-1525?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13756655#comment-13756655 ] 

Martin Weiler commented on ELY-1525:
------------------------------------

[~dlofthouse] FYI, I could reproduce the issue also with a simple web app using commons-fileupload, deployed on EAP 7.2 and configured with RH-SSO 7.3 / SAML (see attached project).

As described in the findings in KEYCLOAK-8318, the MultiPartParserDefinition class breaks the multi-part form data. If I remove this parser, then the upload works without issues. Could you please take a look at the provided patch proposal and let us know your thoughts? Thanks!


> When SSO is enabled, multipart form and form enconding stop working.
> --------------------------------------------------------------------
>
>                 Key: ELY-1525
>                 URL: https://issues.jboss.org/browse/ELY-1525
>             Project: WildFly Elytron
>          Issue Type: Bug
>    Affects Versions: 1.1.6.Final, 1.2.1.Final
>            Reporter: Estevão Freitas
>            Assignee: Darran Lofthouse
>            Priority: Critical
>             Fix For: 1.10.0.CR3
>
>
> I developed a JSF application with "h:inputFile" component and it requires a form with " enctype="multipart/form-data" ".
> I use this tutorial for SSO: https://docs.jboss.org/author/display/WFLY/Web+Single+Sign-On .
> When I execute the last step: " /subsystem=undertow/application-security-domain=other/setting=single-sign-on:add(key-store=example-keystore, key-alias=localhost, domain=localhost, credential-reference=clear-text=secret}) ", all commandButtons stop working.
> If I remove the "h:inputFile" component and " enctype="multipart/form-data" " from form all buttons works again, but all words with accents are corrupted.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)



More information about the jboss-jira mailing list