I have an issue with the request-security processor. I configured tomcat in order to use the form authentication. But if I call the request-security processor immediately after login then it returns a such instance:
<request-security><secure>false</secure></request-security> I have to refresh the page in order to have a complete response: <request-security> <auth-type>FORM</auth-type> <secure>false</secure> <remote-user>admin</remote-user> <user-principal>admin</user-principal> <role>admin</role> </request-security> It seems there is an internal latency. I invoke the request-security processor in the xforms-ready action. Any idea on how to fix this issue or bypass it? Many thanks. Alessandro -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
The problem seems related to the browser cache. What is the best solution to disabling caching client-side on tomcat?
-----Original Message----- From: Vancheri, Alessandro Sent: lunedì 11 febbraio 2008 17.22 To: [hidden email] Subject: [ops-users] Issue with request-security processor I have an issue with the request-security processor. I configured tomcat in order to use the form authentication. But if I call the request-security processor immediately after login then it returns a such instance: <request-security><secure>false</secure></request-security> I have to refresh the page in order to have a complete response: <request-security> <auth-type>FORM</auth-type> <secure>false</secure> <remote-user>admin</remote-user> <user-principal>admin</user-principal> <role>admin</role> </request-security> It seems there is an internal latency. I invoke the request-security processor in the xforms-ready action. Any idea on how to fix this issue or bypass it? Many thanks. Alessandro -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Administrator
|
Orbeon Forms already sends an Expires header which should cause
dynamic pages to be non-cacheable. What kind of page is causing a problem? An XForms page? Something else? How is it generated? -Erik On Feb 11, 2008, at 10:13 AM, Vancheri, Alessandro wrote: > The problem seems related to the browser cache. What is the best > solution to disabling caching client-side on tomcat? > > -----Original Message----- > From: Vancheri, Alessandro > Sent: lunedì 11 febbraio 2008 17.22 > To: [hidden email] > Subject: [ops-users] Issue with request-security processor > > I have an issue with the request-security processor. I configured > tomcat in order to use the form authentication. But if I call the > request-security processor immediately after login then it returns a > such instance: > > <request-security><secure>false</secure></request-security> > > I have to refresh the page in order to have a complete response: > > <request-security> > <auth-type>FORM</auth-type> > <secure>false</secure> > <remote-user>admin</remote-user> > <user-principal>admin</user-principal> > <role>admin</role> > </request-security> > > It seems there is an internal latency. I invoke the request-security > processor in the xforms-ready action. Any idea on how to fix this > issue or bypass it? > > Many thanks. > > Alessandro > > > > -- > You receive this message as a subscriber of the [hidden email] > mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/ -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
The two problems aren't related. On invoking the request-security processor at the first login of a user, it returns a partial response. If I refresh the page it returns a full response. If I logout and then login (without closing the browser) it returns a complete response. If I close the browser, reopen it and login it returns a partial response. It isn't a caching problem (in the logs the submission returns the partial response). Any idea?
Regarding the caching the problem is caused by xhtml pages. I'm still investigating. But the problem seems related to the time of the server. It works fine if the time of the server is an hour before the time of the client. Otherwise the client (internet explorer or safari randomically caches some pages). Alessandro -----Messaggio originale----- Da: Erik Bruchez [mailto:[hidden email]] Per conto di Erik Bruchez Inviato: martedì 12 febbraio 2008 19.00 A: [hidden email] Oggetto: [ops-users] Re: RE: Issue with request-security processor Orbeon Forms already sends an Expires header which should cause dynamic pages to be non-cacheable. What kind of page is causing a problem? An XForms page? Something else? How is it generated? -Erik On Feb 11, 2008, at 10:13 AM, Vancheri, Alessandro wrote: > The problem seems related to the browser cache. What is the best > solution to disabling caching client-side on tomcat? > > -----Original Message----- > From: Vancheri, Alessandro > Sent: lunedì 11 febbraio 2008 17.22 > To: [hidden email] > Subject: [ops-users] Issue with request-security processor > > I have an issue with the request-security processor. I configured > tomcat in order to use the form authentication. But if I call the > request-security processor immediately after login then it returns a > such instance: > > <request-security><secure>false</secure></request-security> > > I have to refresh the page in order to have a complete response: > > <request-security> > <auth-type>FORM</auth-type> > <secure>false</secure> > <remote-user>admin</remote-user> > <user-principal>admin</user-principal> > <role>admin</role> > </request-security> > > It seems there is an internal latency. I invoke the request-security > processor in the xforms-ready action. Any idea on how to fix this > issue or bypass it? > > Many thanks. > > Alessandro > > > > -- > You receive this message as a subscriber of the [hidden email] > mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/ -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Administrator
|
oxf:request-security directly calls the Servlet API, so it should be
in sync with the Servlet container. Do you have the same behavior if you put a @debug attribute on the output of that processor? -Erik On Feb 12, 2008, at 12:18 PM, Vancheri, Alessandro wrote: > The two problems aren't related. On invoking the request-security > processor at the first login of a user, it returns a partial > response. If I refresh the page it returns a full response. If I > logout and then login (without closing the browser) it returns a > complete response. If I close the browser, reopen it and login it > returns a partial response. It isn't a caching problem (in the logs > the submission returns the partial response). Any idea? > > Regarding the caching the problem is caused by xhtml pages. I'm > still investigating. But the problem seems related to the time of > the server. It works fine if the time of the server is an hour > before the time of the client. Otherwise the client (internet > explorer or safari randomically caches some pages). > > Alessandro > > -----Messaggio originale----- > Da: Erik Bruchez [mailto:[hidden email]] Per conto di Erik Bruchez > Inviato: martedì 12 febbraio 2008 19.00 > A: [hidden email] > Oggetto: [ops-users] Re: RE: Issue with request-security processor > > Orbeon Forms already sends an Expires header which should cause > dynamic pages to be non-cacheable. > > What kind of page is causing a problem? An XForms page? Something > else? How is it generated? > > -Erik > > On Feb 11, 2008, at 10:13 AM, Vancheri, Alessandro wrote: > >> The problem seems related to the browser cache. What is the best >> solution to disabling caching client-side on tomcat? >> >> -----Original Message----- >> From: Vancheri, Alessandro >> Sent: lunedì 11 febbraio 2008 17.22 >> To: [hidden email] >> Subject: [ops-users] Issue with request-security processor >> >> I have an issue with the request-security processor. I configured >> tomcat in order to use the form authentication. But if I call the >> request-security processor immediately after login then it returns a >> such instance: >> >> <request-security><secure>false</secure></request-security> >> >> I have to refresh the page in order to have a complete response: >> >> <request-security> >> <auth-type>FORM</auth-type> >> <secure>false</secure> >> <remote-user>admin</remote-user> >> <user-principal>admin</user-principal> >> <role>admin</role> >> </request-security> >> >> It seems there is an internal latency. I invoke the request-security >> processor in the xforms-ready action. Any idea on how to fix this >> issue or bypass it? >> >> Many thanks. >> >> Alessandro >> >> >> >> -- >> You receive this message as a subscriber of the [hidden email] >> mailing list. >> To unsubscribe: mailto:[hidden email] >> For general help: mailto:[hidden email]?subject=help >> OW2 mailing lists service home page: http://www.ow2.org/wws > > -- > Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/ > > > -- > You receive this message as a subscriber of the [hidden email] > mailing list. > To unsubscribe: mailto:[hidden email] > For general help: mailto:[hidden email]?subject=help > OW2 mailing lists service home page: http://www.ow2.org/wws Orbeon Forms - Web Forms for the Enterprise Done the Right Way http://www.orbeon.com/ -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Yes, the behavior is the same.
-----Messaggio originale----- Da: Erik Bruchez [mailto:[hidden email]] Inviato: martedì 12 febbraio 2008 22.53 A: [hidden email] Oggetto: [ops-users] Re: R: Re: RE: Issue with request-security processor oxf:request-security directly calls the Servlet API, so it should be in sync with the Servlet container. Do you have the same behavior if you put a @debug attribute on the output of that processor? -Erik -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Administrator
|
Alessandro,
On Feb 12, 2008, at 10:08 PM, Vancheri, Alessandro wrote: > Yes, the behavior is the same. What version of Orbeon Forms are you using? Can you also reproduce this problem in the "Java Authentication" example (at the very bottom of the examples list), or maybe by changing the example to be closer to what you have? Alex -- Orbeon Forms - Web 2.0 Forms, open-source, for the Enterprise Orbeon's Blog: http://www.orbeon.com/blog/ Personal Blog: http://avernet.blogspot.com/ -- You receive this message as a subscriber of the [hidden email] mailing list. To unsubscribe: mailto:[hidden email] For general help: mailto:[hidden email]?subject=help OW2 mailing lists service home page: http://www.ow2.org/wws |
Free forum by Nabble | Edit this page |