Uploaded image for project: 'OpenAM'
  1. OpenAM
  2. OPENAM-5237

OAuth2 authorization consent page uses absolute URL in FORM tag

    Details

    • Target Version/s:
    • Rank:
      1|hzoyjr:
    • Support Ticket IDs:

      Description

      OAuth2 authorization consent page uses absolute URL to submit user's consent feedback. This causes issues if authorization server is running behind proxy server/loadbalancer because it could retrieve wrong scheme://host:port

        Attachments

          Issue Links

          is related to

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-3659 OAuth2 auth module uses HttpServletRequest.getRequestURL() to construct ORIG_URL cookie

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-3660 RedirectCallbackHander uses HttpServletRequest.getRequestURL to construct AM_REDIRECT_BACK_SERVER_URL

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. OPENAM-5130 OAuth2 authorization will redirect using scheme://hostname:port of OpenAM server rather than reverse proxy

          • Major - Major loss of function.
          • Resolved

            Activity

              People

              • Assignee:
                sachiko Sachiko Wallace
                Reporter:
                sachiko Sachiko Wallace
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: