Uploaded image for project: 'OpenAM Agents'
  1. OpenAM Agents
  2. AMAGENTS-278

Policy Agent is generating the cookies and headers, if one of the Attributes processing is Cookie and one of the Attribute Map is not empty.

    Details

      Description

      Policy Agent is generating the cookies and headers, if one of the Attributes processing is Cookie and one of the Attribute Map is not empty.

      Reproduction Steps:

      1. Select HTTP_HEADER in Profile Attribute Processing and create the Profile attribute map like cn=PERSON_CN and uid=PERSON_UID.
      2. Select HTTP_COOKIE for Response Attributes Processing
      3. Save the agent profile.
      4. While accessing the protected page after successful login, we get additional two cookies HTTP_<HEADER-NAME> along with the http-header.

      Expected Behavior:
      While accessing the protected page after successful login, we should get only the http-header and not the cookies.

      The cookie/header generation should be improved like checking each attribute processing AND the respective map is not empty.

      Currently the customers use this functionality as a feature like generating HTTP-HEADERS and HTTP_COOKIE and hence a new selection of HTTP_HEADER AND HTTP_COOKIE is preferred.

        Attachments

          Activity

            People

            • Assignee:
              mareks Mareks Malnacs
              Reporter:
              kamal.sivanandam@forgerock.com Kamal Sivanandam
            • Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: