Loading...

XML

Word

Printable

Type: Bug
Resolution: Done
Priority: Critical
Fix Version/s: 20.0.0.Beta1, 20.0.0.Final
Affects Version/s: None
Component/s: Security
Labels:
- downstream_dependency

Steps to Reproduce:

Hide

Use two attached reproducers (idp.war and reproducer.war) plus IDP and SP security-domains from:
https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/how_to_set_up_sso_with_saml_v2/index#setting_up_idp

Also, create a test user with group membership in "user".

Then visit: http::<hostname:port>/reproducer, login and try to upload a file. A successful file upload will indicate 1 file uploaded, but failed ones show 0 files uploaded.

Show
Use two attached reproducers (idp.war and reproducer.war) plus IDP and SP security-domains from: https://access.redhat.com/documentation/en-us/red_hat_jboss_enterprise_application_platform/7.1/html-single/how_to_set_up_sso_with_saml_v2/index#setting_up_idp Also, create a test user with group membership in "user". Then visit: http::<hostname:port>/reproducer, login and try to upload a file. A successful file upload will indicate 1 file uploaded, but failed ones show 0 files uploaded.
Git Pull Request:
https://github.com/jbossas/redhat-picketlink-bindings/pull/67

This is a followup to ~~JBEAP-17829~~ - ~~WFLY-12705~~ - File upload fails with IllegalStateException when PicketLink SSO is enabled

The patch resolved a portion of the file upload issues, but uploads over a certain size fail (appears to be ~20k but I don't have a precise number).

This issue occurs only with picketlink security and doing file uploads

The reproducer shows that the request class differs between successful uploads and unsuccessful uploads:

Successful calls use SPFormAuthenticationRequestWrapper:
[cdolphy@styx jboss-eap-7.2]$ 10:52:41,761 INFO [stdout] (default task-2) Class of Request - org.picketlink.identity.federation.bindings.wildfly.sp.SPFormAuthenticationRequestWrapper
10:52:41,764 INFO [stdout] (default task-2) item is name=jboss-fileupload-swallowed-exception.txt, StoreLocation=/home/cdolphy/gss/cases/02523510/jboss-eap-7.2/standalone/tmp/reproducer.war/upload_3c1122fc_16ea378ffdc__8000_00000003.tmp, size=9449bytes, isFormField=false, FieldName=fileupload

But unsuccessful requests use HttpServletRequestImpl:
10:53:02,818 INFO [stdout] (default task-2) Class of Request - io.undertow.servlet.spec.HttpServletRequestImpl

is cloned by

JBEAP-18203 [GSS](7.3.z) File upload (multipart) with Picketlink fails with sizes over 20k (using Apache Commons FileUpload)

Verified

is duplicated by

WFLY-12872 File UploadMultipart does not work for files greater than 10 kB with PicketLink SSO is enabled

Closed

is incorporated by

WFLY-12851 Upgrade PicketLink bindings from 2.5.5.SP12-redhat-00009-jbossorg-1 to 2.5.5.SP12-redhat-00012

Closed

relates to

WFLY-12852 Test case for JBEAP-18203 (File upload (multipart) with Picketlink fails with sizes over 20k)

Resolved

Assignee:: Bartosz Spyrko-Smietanko

Reporter:: Bartosz Spyrko-Smietanko

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Created:: 2019/12/04 9:37 AM

Updated:: 2021/03/10 10:30 PM

Resolved:: 2020/03/25 1:03 PM

Details

Description

Attachments

Issue Links

Activity

People

Dates