Issue with request-security processor

classic Classic list List threaded Threaded
7 messages Options
Reply | Threaded
Open this post in threaded view
|

Issue with request-security processor

Vancheri, Alessandro
I have an issue with the request-security processor. I configured tomcat in order to use the form authentication. But if I call the request-security processor immediately after login then it returns a such instance:

<request-security><secure>false</secure></request-security>

I have to refresh the page in order to have a complete response:

<request-security>
<auth-type>FORM</auth-type>
<secure>false</secure>
<remote-user>admin</remote-user>
<user-principal>admin</user-principal>
<role>admin</role>
</request-security>

It seems there is an internal latency. I invoke the request-security processor in the xforms-ready action. Any idea on how to fix this issue or bypass it?

Many thanks.

Alessandro




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

RE: Issue with request-security processor

Vancheri, Alessandro
The problem seems related to the browser cache. What is the best solution to disabling caching client-side on tomcat?

-----Original Message-----
From: Vancheri, Alessandro
Sent: lunedì 11 febbraio 2008 17.22
To: [hidden email]
Subject: [ops-users] Issue with request-security processor

I have an issue with the request-security processor. I configured tomcat in order to use the form authentication. But if I call the request-security processor immediately after login then it returns a such instance:

<request-security><secure>false</secure></request-security>

I have to refresh the page in order to have a complete response:

<request-security>
<auth-type>FORM</auth-type>
<secure>false</secure>
<remote-user>admin</remote-user>
<user-principal>admin</user-principal>
<role>admin</role>
</request-security>

It seems there is an internal latency. I invoke the request-security processor in the xforms-ready action. Any idea on how to fix this issue or bypass it?

Many thanks.

Alessandro




--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: RE: Issue with request-security processor

Erik Bruchez
Administrator
Orbeon Forms already sends an Expires header which should cause  
dynamic pages to be non-cacheable.

What kind of page is causing a problem? An XForms page? Something  
else? How is it generated?

-Erik

On Feb 11, 2008, at 10:13 AM, Vancheri, Alessandro wrote:

> The problem seems related to the browser cache. What is the best  
> solution to disabling caching client-side on tomcat?
>
> -----Original Message-----
> From: Vancheri, Alessandro
> Sent: lunedì 11 febbraio 2008 17.22
> To: [hidden email]
> Subject: [ops-users] Issue with request-security processor
>
> I have an issue with the request-security processor. I configured  
> tomcat in order to use the form authentication. But if I call the  
> request-security processor immediately after login then it returns a  
> such instance:
>
> <request-security><secure>false</secure></request-security>
>
> I have to refresh the page in order to have a complete response:
>
> <request-security>
> <auth-type>FORM</auth-type>
> <secure>false</secure>
> <remote-user>admin</remote-user>
> <user-principal>admin</user-principal>
> <role>admin</role>
> </request-security>
>
> It seems there is an internal latency. I invoke the request-security  
> processor in the xforms-ready action. Any idea on how to fix this  
> issue or bypass it?
>
> Many thanks.
>
> Alessandro
>
>
>
> --
> You receive this message as a subscriber of the [hidden email]  
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

R: Re: RE: Issue with request-security processor

Vancheri, Alessandro
The two problems aren't related. On invoking the request-security processor at the first login of a user, it returns a partial response. If I refresh the page it returns a full response. If I logout and then login (without closing the browser) it returns a complete response. If I close the browser, reopen it and login it returns a partial response. It isn't a caching problem (in the logs the submission returns the partial response). Any idea?

Regarding the caching the problem is caused by xhtml pages. I'm still investigating. But the problem seems related to the time of the server. It works fine if the time of the server is an hour before the time of the client. Otherwise the client (internet explorer or safari randomically caches some pages).

Alessandro

-----Messaggio originale-----
Da: Erik Bruchez [mailto:[hidden email]] Per conto di Erik Bruchez
Inviato: martedì 12 febbraio 2008 19.00
A: [hidden email]
Oggetto: [ops-users] Re: RE: Issue with request-security processor

Orbeon Forms already sends an Expires header which should cause dynamic pages to be non-cacheable.

What kind of page is causing a problem? An XForms page? Something else? How is it generated?

-Erik

On Feb 11, 2008, at 10:13 AM, Vancheri, Alessandro wrote:

> The problem seems related to the browser cache. What is the best
> solution to disabling caching client-side on tomcat?
>
> -----Original Message-----
> From: Vancheri, Alessandro
> Sent: lunedì 11 febbraio 2008 17.22
> To: [hidden email]
> Subject: [ops-users] Issue with request-security processor
>
> I have an issue with the request-security processor. I configured
> tomcat in order to use the form authentication. But if I call the
> request-security processor immediately after login then it returns a
> such instance:
>
> <request-security><secure>false</secure></request-security>
>
> I have to refresh the page in order to have a complete response:
>
> <request-security>
> <auth-type>FORM</auth-type>
> <secure>false</secure>
> <remote-user>admin</remote-user>
> <user-principal>admin</user-principal>
> <role>admin</role>
> </request-security>
>
> It seems there is an internal latency. I invoke the request-security
> processor in the xforms-ready action. Any idea on how to fix this
> issue or bypass it?
>
> Many thanks.
>
> Alessandro
>
>
>
> --
> You receive this message as a subscriber of the [hidden email]
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: R: Re: RE: Issue with request-security processor

Erik Bruchez
Administrator
oxf:request-security directly calls the Servlet API, so it should be  
in sync with the Servlet container.

Do you have the same behavior if you put a @debug attribute on the  
output of that processor?

-Erik

On Feb 12, 2008, at 12:18 PM, Vancheri, Alessandro wrote:

> The two problems aren't related. On invoking the request-security  
> processor at the first login of a user, it returns a partial  
> response. If I refresh the page it returns a full response. If I  
> logout and then login (without closing the browser) it returns a  
> complete response. If I close the browser, reopen it and login it  
> returns a partial response. It isn't a caching problem (in the logs  
> the submission returns the partial response). Any idea?
>
> Regarding the caching the problem is caused by xhtml pages. I'm  
> still investigating. But the problem seems related to the time of  
> the server. It works fine if the time of the server is an hour  
> before the time of the client. Otherwise the client (internet  
> explorer or safari randomically caches some pages).
>
> Alessandro
>
> -----Messaggio originale-----
> Da: Erik Bruchez [mailto:[hidden email]] Per conto di Erik Bruchez
> Inviato: martedì 12 febbraio 2008 19.00
> A: [hidden email]
> Oggetto: [ops-users] Re: RE: Issue with request-security processor
>
> Orbeon Forms already sends an Expires header which should cause  
> dynamic pages to be non-cacheable.
>
> What kind of page is causing a problem? An XForms page? Something  
> else? How is it generated?
>
> -Erik
>
> On Feb 11, 2008, at 10:13 AM, Vancheri, Alessandro wrote:
>
>> The problem seems related to the browser cache. What is the best
>> solution to disabling caching client-side on tomcat?
>>
>> -----Original Message-----
>> From: Vancheri, Alessandro
>> Sent: lunedì 11 febbraio 2008 17.22
>> To: [hidden email]
>> Subject: [ops-users] Issue with request-security processor
>>
>> I have an issue with the request-security processor. I configured
>> tomcat in order to use the form authentication. But if I call the
>> request-security processor immediately after login then it returns a
>> such instance:
>>
>> <request-security><secure>false</secure></request-security>
>>
>> I have to refresh the page in order to have a complete response:
>>
>> <request-security>
>> <auth-type>FORM</auth-type>
>> <secure>false</secure>
>> <remote-user>admin</remote-user>
>> <user-principal>admin</user-principal>
>> <role>admin</role>
>> </request-security>
>>
>> It seems there is an internal latency. I invoke the request-security
>> processor in the xforms-ready action. Any idea on how to fix this
>> issue or bypass it?
>>
>> Many thanks.
>>
>> Alessandro
>>
>>
>>
>> --
>> You receive this message as a subscriber of the [hidden email]
>> mailing list.
>> To unsubscribe: mailto:[hidden email]
>> For general help: mailto:[hidden email]?subject=help
>> OW2 mailing lists service home page: http://www.ow2.org/wws
>
> --
> Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/
>
>
> --
> You receive this message as a subscriber of the [hidden email]  
> mailing list.
> To unsubscribe: mailto:[hidden email]
> For general help: mailto:[hidden email]?subject=help
> OW2 mailing lists service home page: http://www.ow2.org/wws
--
Orbeon Forms - Web Forms for the Enterprise Done the Right Way
http://www.orbeon.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

R: Re: R: Re: RE: Issue with request-security processor

Vancheri, Alessandro
Yes, the behavior is the same.

-----Messaggio originale-----
Da: Erik Bruchez [mailto:[hidden email]]
Inviato: martedì 12 febbraio 2008 22.53
A: [hidden email]
Oggetto: [ops-users] Re: R: Re: RE: Issue with request-security processor

oxf:request-security directly calls the Servlet API, so it should be in sync with the Servlet container.

Do you have the same behavior if you put a @debug attribute on the output of that processor?

-Erik


--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws
Reply | Threaded
Open this post in threaded view
|

Re: R: Re: R: Re: RE: Issue with request-security processor

Alessandro Vernet
Administrator
Alessandro,

On Feb 12, 2008, at 10:08 PM, Vancheri, Alessandro wrote:

> Yes, the behavior is the same.


What version of Orbeon Forms are you using?

Can you also reproduce this problem in the "Java Authentication"  
example (at the very bottom of the examples list), or maybe by  
changing the example to be closer to what you have?

Alex
--
Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise
Orbeon's Blog: http://www.orbeon.com/blog/
Personal Blog: http://avernet.blogspot.com/



--
You receive this message as a subscriber of the [hidden email] mailing list.
To unsubscribe: mailto:[hidden email]
For general help: mailto:[hidden email]?subject=help
OW2 mailing lists service home page: http://www.ow2.org/wws