Uploaded image for project: 'Reference Application'
  1. Reference Application
  2. RA-986

Occasional Invalid redirects upon successful login

    XMLWordPrintable

Details

    • Undetermined

    Description

      Occasionally you will get a MissingRequiredParameterException after successful login, this is because when a user visits a page that requires a certain request parameter and clicks the logout button, the LogoutServlet in the platform redirects then to the index page with the referer header set to the the page they were viewing, but the index(home) page controller in the reference application will also redirect them to the login page since they are no longer authenticated, it appears like web browser maintains the same referer header on redirects implying that when the user successfully logs in, they will get redirected to the page they were viewing when they logged out.

      Solution:

      LoginController.getRedirectUrlFromReferer in the reference application module needs to preserve the query string of the referer URL

      Gliffy Diagrams

        Attachments

          Issue Links

            Activity

              People

                dkayiwa Daniel Kayiwa
                wyclif Wyclif Luyima
                Votes:
                1 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                  Created:
                  Updated:
                  Resolved: