Uploaded image for project: 'Identity Gateway'
  1. Identity Gateway
  2. OPENIG-4244

Error when loading route of the GatewayGuide (Jetty & AmService)

    XMLWordPrintable

    Details

    • Type: Bug
    • Status: Closed
    • Priority: Critical
    • Resolution: Fixed
    • Affects Version/s: 7.0.0-micsvc-1.0.3
    • Fix Version/s: 6.5.3, 7.0.0
    • Component/s: None
    • Labels:
      None
    • Environment:
      OS : OSX-Mojave 10.15.1
      jdk : openjdk-11.0.5
      IG: 7.0.0-SNAPSHOT 8b5c4fd2dff
      WebContainer : jetty-distribution-9.4.22.v20191022
    • Story Points:
      2

      Description

      Regression due to the commit 8b5c4fd2dff
      test OK : 4d5ab57a06f
      test KO : 8b5c4fd2dff

      Issue occurring on jetty-distribution-9.4.22.v20191022, not on Tomcat.

      After AM is configured properly (with `ig_agent`), the following route can't be loaded, and the request ends in timeout :

      {
          "name": "00-throttle-mapped",
          "baseURI": "http://app.example.com:8081",
          "condition": "${matches(request.uri.path, '^/home/throttle-mapped')}",
          "heap": [
              {
                  "name": "AmService-1",
                  "type": "AmService",
                  "config": {
                      "url": "http://openam.example.com:8088/openam",
                      "realm": "/",
                      "ssoTokenHeader": "iPlanetDirectoryPro",
                      "version": "6.5.2",
                      "agent": {
                          "username": "ig_agent",
                          "password": "password"
                      },
                      "sessionCache": {
                          "enabled": false
                      }
                  }
              }
          ],
          "handler": {
              "type": "Chain",
              "config": {
                  "filters": [
                      {
                          "name": "OAuth2ResourceServerFilter-1",
                          "type": "OAuth2ResourceServerFilter",
                          "config": {
                              "scopes": [
                                  "mail",
                                  "employeenumber"
                              ],
                              "requireHttps": false,
                              "realm": "OpenIG",
                              "accessTokenResolver": {
                                  "name": "token-resolver-1",
                                  "type": "OpenAmAccessTokenResolver",
                                  "config": {
                                      "amService": "AmService-1"
                                  }
                              }
                          }
                      },
                      {
                          "name": "ThrottlingFilter-1",
                          "type": "ThrottlingFilter",
                          "config": {
                              "requestGroupingPolicy": "${contexts.oauth2.accessToken.info.mail}",
                              "throttlingRatePolicy": {
                                  "name": "MappedPolicy",
                                  "type": "MappedThrottlingPolicy",
                                  "config": {
                                      "throttlingRateMapper": "${contexts.oauth2.accessToken.info.employeenumber}",
                                      "throttlingRatesMapping": {
                                          "gold": {
                                              "numberOfRequests": 6,
                                              "duration": "10 s"
                                          },
                                          "silver": {
                                              "numberOfRequests": 3,
                                              "duration": "10 s"
                                          },
                                          "bronze": {
                                              "numberOfRequests": 1,
                                              "duration": "10 s"
                                          }
                                      },
                                      "defaultRate": {
                                          "numberOfRequests": 1,
                                          "duration": "10 s"
                                      }
                                  }
                              }
                          }
                      }
                  ],
                  "handler": "ReverseProxyHandler"
              }
          }
      }
      

      QA info :

      1 - git pull PyForge
      2 -

      ./cleanup.py -f

      3 -

      ./ configure.py

      4 - launch the following commands (on Linux/Mac), in the PyForge root directory :

      export PYFORGE_ROOT_DIR=`pwd`; source PyBot/OpenIG/tools/.qa_tools
      ppth
      

      5 - launch the tests with the following alias

      rig -s GatewayGuide/LoadingRoutes -n
      

      Servers are then available for checks... (NB : test may have been modified, to expect the current error)
      6 -

      ./cleanup.py -f

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              wayne.morrison Wayne Morrison
              Reporter:
              jcdevil Jean-Charles Deville
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved: