[jboss-jira] [JBoss JIRA] (ELY-1525) When SSO is enabled, multipart form and form enconding stop working.

Darran Lofthouse (Jira) issues at jboss.org
Mon Jul 8 11:22:00 EDT 2019


    [ https://issues.jboss.org/browse/ELY-1525?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13756806#comment-13756806 ] 

Darran Lofthouse commented on ELY-1525:
---------------------------------------

I am wondering if there is a slightly different issue in that by having the MultiPartParserDefinition we have already completed parsing before the request reached it's servlet.

The problem is this FormDataParser is required to support forms submitted during authentication, especially during FORM authentication.

MultiPartParserDefinition supports "multipart/form-data" and FormEncodedDataDefinition supports "application/x-www-form-urlencoded" - the proposed change is disabling support for the first.

Is there any way we can get this into an easier reproducer?


> When SSO is enabled, multipart form and form enconding stop working.
> --------------------------------------------------------------------
>
>                 Key: ELY-1525
>                 URL: https://issues.jboss.org/browse/ELY-1525
>             Project: WildFly Elytron
>          Issue Type: Bug
>    Affects Versions: 1.1.6.Final, 1.2.1.Final
>            Reporter: Estevão Freitas
>            Assignee: Darran Lofthouse
>            Priority: Critical
>             Fix For: 1.10.0.CR3
>
>         Attachments: 0001-ELY-1525-Initialize-FormParserFactory-with-FormEncod.patch, ely-1515-reproducer.zip
>
>
> I developed a JSF application with "h:inputFile" component and it requires a form with " enctype="multipart/form-data" ".
> I use this tutorial for SSO: https://docs.jboss.org/author/display/WFLY/Web+Single+Sign-On .
> When I execute the last step: " /subsystem=undertow/application-security-domain=other/setting=single-sign-on:add(key-store=example-keystore, key-alias=localhost, domain=localhost, credential-reference=clear-text=secret}) ", all commandButtons stop working.
> If I remove the "h:inputFile" component and " enctype="multipart/form-data" " from form all buttons works again, but all words with accents are corrupted.



--
This message was sent by Atlassian Jira
(v7.12.1#712002)



More information about the jboss-jira mailing list