[cas-user] CAS 6.0.3 - The request was rejected because the URL was not normalized.

Thu, 11 Apr 2019 00:41:25 -0700 

Hi!

Having problems upgrading from 5.3.5 to 6.0.3 on docker. 
Running fine on localhost (http), but getting errors like below on rc 
(https):

2019-04-11 07:19:02,477 ERROR 
[org.springframework.boot.web.servlet.support.ErrorPageFilter] - 
<Forwarding to error page from request [/login] due to exception [The 
request was rejected because the URL was not normalized.]>
org.springframework.security.web.firewall.RequestRejectedException: The 
request was rejected because the URL was not normalized.
        at 
org.springframework.security.web.firewall.StrictHttpFirewall.getFirewalledRequest(StrictHttpFirewall.java:296)
 
~[spring-security-web-5.1.2.RELEASE.jar:5.1.2.RELEASE]
        at 
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:194)
 
~[spring-security-web-5.1.2.RELEASE.jar:5.1.2.RELEASE]
        at 
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
 
~[spring-security-web-5.1.2.RELEASE.jar:5.1.2.RELEASE]
        at 
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:92)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:130)
 
~[spring-boot-2.1.2.RELEASE.jar:2.1.2.RELEASE]
        at 
org.springframework.boot.web.servlet.support.ErrorPageFilter.access$000(ErrorPageFilter.java:66)
 
~[spring-boot-2.1.2.RELEASE.jar:2.1.2.RELEASE]
        at 
org.springframework.boot.web.servlet.support.ErrorPageFilter$1.doFilterInternal(ErrorPageFilter.java:105)
 
~[spring-boot-2.1.2.RELEASE.jar:2.1.2.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.springframework.boot.web.servlet.support.ErrorPageFilter.doFilter(ErrorPageFilter.java:123)
 
~[spring-boot-2.1.2.RELEASE.jar:2.1.2.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.filterAndRecordMetrics(WebMvcMetricsFilter.java:117)
 
~[spring-boot-actuator-2.1.2.RELEASE.jar:2.1.2.RELEASE]
        at 
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:106)
 
~[spring-boot-actuator-2.1.2.RELEASE.jar:2.1.2.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.apereo.cas.logging.web.ThreadContextMDCServletFilter.doFilter(ThreadContextMDCServletFilter.java:98)
 
~[cas-server-core-logging-6.0.3.jar:6.0.3]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.apereo.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:66)
 
~[inspektr-common-1.8.4.GA.jar:1.8.4.GA]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.apache.logging.log4j.web.Log4jServletFilter.doFilter(Log4jServletFilter.java:71)
 
~[log4j-web-2.11.1.jar:2.11.1]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:200)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:490)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
 
~[catalina.jar:9.0.17]
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) 
~[catalina.jar:9.0.17]
        at 
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408) 
~[tomcat-coyote.jar:9.0.17]
        at 
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
 
~[tomcat-coyote.jar:9.0.17]
        at 
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:834)
 
~[tomcat-coyote.jar:9.0.17]
        at 
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1415)
 
~[tomcat-coyote.jar:9.0.17]
        at 
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) 
~[tomcat-coyote.jar:9.0.17]
        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) 
~[?:?]
        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) 
~[?:?]
        at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
 
~[tomcat-util.jar:9.0.17]
        at java.lang.Thread.run(Thread.java:834) [?:?]



Also tried a clean install from war overlay but same errors:

2019-04-11 07:07:27,485 ERROR 
[org.apache.catalina.core.ContainerBase.[Tomcat].[localhost].[/cas].[dispatcherServlet]]
 
- <Servlet.service() for servlet [dispatcherServlet] in context with path 
[/cas] threw exception>
org.springframework.security.web.firewall.RequestRejectedException: The 
request was rejected because the URL was not normalized.
        at 
org.springframework.security.web.firewall.StrictHttpFirewall.getFirewalledRequest(StrictHttpFirewall.java:296)
 
~[spring-security-web-5.1.2.RELEASE.jar!/:5.1.2.RELEASE]
        at 
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:194)
 
~[spring-security-web-5.1.2.RELEASE.jar!/:5.1.2.RELEASE]
        at 
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
 
~[spring-security-web-5.1.2.RELEASE.jar!/:5.1.2.RELEASE]
        at 
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:357)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:270)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.springframework.web.filter.RequestContextFilter.doFilterInternal(RequestContextFilter.java:99)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.springframework.web.filter.FormContentFilter.doFilterInternal(FormContentFilter.java:92)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.springframework.web.filter.HiddenHttpMethodFilter.doFilterInternal(HiddenHttpMethodFilter.java:93)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.filterAndRecordMetrics(WebMvcMetricsFilter.java:117)
 
~[spring-boot-actuator-2.1.2.RELEASE.jar!/:2.1.2.RELEASE]
        at 
org.springframework.boot.actuate.metrics.web.servlet.WebMvcMetricsFilter.doFilterInternal(WebMvcMetricsFilter.java:106)
 
~[spring-boot-actuator-2.1.2.RELEASE.jar!/:2.1.2.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apereo.cas.logging.web.ThreadContextMDCServletFilter.doFilter(ThreadContextMDCServletFilter.java:98)
 
~[cas-server-core-logging-6.0.3.jar!/:6.0.3]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:200)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:107)
 
~[spring-web-5.1.3.RELEASE.jar!/:5.1.3.RELEASE]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apereo.inspektr.common.web.ClientInfoThreadLocalFilter.doFilter(ClientInfoThreadLocalFilter.java:66)
 
~[inspektr-common-1.8.4.GA.jar!/:1.8.4.GA]
        at 
org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:166)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:200)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:96)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:490)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:139) 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:92) 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:74)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:678)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.valves.RemoteIpValve.invoke(RemoteIpValve.java:679) 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:343) 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:408) 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:66)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:834)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1415)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:49) 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at 
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1128) 
~[?:?]
        at 
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:628) 
~[?:?]
        at 
org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
 
~[tomcat-embed-core-9.0.17.jar!/:9.0.17]
        at java.lang.Thread.run(Thread.java:834) [?:?]



I think it has to do with the autoconfiguration of spring boot security, 
but not able to find a solution.
Anyone had the same problem? Solution?

Any help would be greatly appreceiated!


Best Regards
Tobias Johansson

-- 
- Website: https://apereo.github.io/cas
- Gitter Chatroom: https://gitter.im/apereo/cas
- List Guidelines: https://goo.gl/1VRrw7
- Contributions: https://goo.gl/mh7qDG
--- 
You received this message because you are subscribed to the Google Groups "CAS 
Community" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to cas-user+unsubscr...@apereo.org.
To view this discussion on the web visit 
https://groups.google.com/a/apereo.org/d/msgid/cas-user/b4e6be23-9d50-484a-bdfa-d712a40d3230%40apereo.org.

Reply via email to