Alon Bar-Lev has posted comments on this change. Change subject: aaa : Add engine sso ......................................................................
Patch Set 23: (3 comments) http://gerrit.ovirt.org/#/c/36119/23/backend/manager/modules/enginesso/src/main/java/org/ovirt/engine/core/sso/servlets/EngineSSOServlet.java File backend/manager/modules/enginesso/src/main/java/org/ovirt/engine/core/sso/servlets/EngineSSOServlet.java: Line 28: @Override Line 29: protected void service(HttpServletRequest request, HttpServletResponse response) Line 30: throws ServletException, IOException { Line 31: if (StringUtils.isEmpty(request.getParameter(SSOUtils.OPAQUE))) { Line 32: throw new RuntimeException("No application data found in request."); > this is valid... just do not provide back anything. ... Line 33: } Line 34: if (StringUtils.isEmpty(request.getParameter(SSOUtils.POST_LOGIN_URL))) { Line 35: throw new RuntimeException("No post login process url found in request."); Line 36: } Line 63: log.error("Internal Database Error", ex); Line 64: throw new AuthenticationException("Internal Database Error", ex); Line 65: } Line 66: } catch (AuthenticationException ex) { Line 67: request.setAttribute("profiles", AuthenticationUtils.getAvailableProfiles(session)); > why profiles is set here? ? Line 68: request.getRequestDispatcher("/WEB-INF/login.jsp?msg=" + ex.getMessage()).forward(request, response); Line 69: } Line 70: } Line 71: http://gerrit.ovirt.org/#/c/36119/23/backend/manager/modules/enginesso/src/main/java/org/ovirt/engine/core/sso/servlets/SSORedirectServlet.java File backend/manager/modules/enginesso/src/main/java/org/ovirt/engine/core/sso/servlets/SSORedirectServlet.java: Line 18: @Override Line 19: protected void service(HttpServletRequest request, HttpServletResponse response) Line 20: throws ServletException, IOException { Line 21: if (StringUtils.isEmpty(request.getParameter(SSOUtils.OPAQUE))) { Line 22: throw new RuntimeException("No application data found in request."); > this is valid, just do not send it back. ... Line 23: } Line 24: if (StringUtils.isEmpty(request.getParameter(SSOUtils.POST_LOGIN_URL))) { Line 25: throw new RuntimeException("No post login url found in request."); Line 26: } -- To view, visit http://gerrit.ovirt.org/36119 To unsubscribe, visit http://gerrit.ovirt.org/settings Gerrit-MessageType: comment Gerrit-Change-Id: I4894fc12653027271b6abd4dd5313b10593703fa Gerrit-PatchSet: 23 Gerrit-Project: ovirt-engine Gerrit-Branch: master Gerrit-Owner: Ravi Nori <[email protected]> Gerrit-Reviewer: Alon Bar-Lev <[email protected]> Gerrit-Reviewer: Oved Ourfali <[email protected]> Gerrit-Reviewer: Ravi Nori <[email protected]> Gerrit-Reviewer: [email protected] Gerrit-Reviewer: oVirt Jenkins CI Server Gerrit-HasComments: Yes _______________________________________________ Engine-patches mailing list [email protected] http://lists.ovirt.org/mailman/listinfo/engine-patches
