shailesh.gavathe ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5e70c03df51b0c9376346f
 ) *created* an issue

GeoServer ( 
https://osgeo-org.atlassian.net/browse/GEOS?atlOrigin=eyJpIjoiYzJjMjg4N2NkN2EzNGZjYTkyMmE0ODdkYzY5ZjUxZTkiLCJwIjoiaiJ9
 ) / Bug ( 
https://osgeo-org.atlassian.net/browse/GEOS-11044?atlOrigin=eyJpIjoiYzJjMjg4N2NkN2EzNGZjYTkyMmE0ODdkYzY5ZjUxZTkiLCJwIjoiaiJ9
 ) GEOS-11044 ( 
https://osgeo-org.atlassian.net/browse/GEOS-11044?atlOrigin=eyJpIjoiYzJjMjg4N2NkN2EzNGZjYTkyMmE0ODdkYzY5ZjUxZTkiLCJwIjoiaiJ9
 ) Geoserver Open ID Connect and Redirect error ( 
https://osgeo-org.atlassian.net/browse/GEOS-11044?atlOrigin=eyJpIjoiYzJjMjg4N2NkN2EzNGZjYTkyMmE0ODdkYzY5ZjUxZTkiLCJwIjoiaiJ9
 )

Issue Type: Bug Affects Versions: 2.22-RC Assignee: Unassigned Components: 
authkey Created: 22/Jun/23 7:57 PM Environment:

Vanilla Geoserver 2.22-RC
Docker
kubernetes

Priority: Medium Reporter: shailesh.gavathe ( 
https://osgeo-org.atlassian.net/secure/ViewProfile.jspa?accountId=5e5e70c03df51b0c9376346f
 )

Hello ,

Testing the Geoserver OpenID Keycloak plugin. We have setup a filter to test it 
on a very simple aboutpage. But when I connect to about page, instead of 
redirecting it gives me 500 error. Not sure what this about ?

HTTP Status 500 – Internal Server Error

*Type* Exception Report

*Message* Unable to handle the Spring Security Exception because the response 
is already committed.

*Description* The server encountered an unexpected condition that prevented it 
from fulfilling the request.

*Exception*

javax.servlet.ServletException: Unable to handle the Spring Security Exception 
because the response is already committed.
        
org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:139)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:71)
        
org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.geoserver.security.filter.GeoServerUserNamePasswordAuthenticationFilter.doFilter(GeoServerUserNamePasswordAuthenticationFilter.java:122)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.oauth2.GeoServerOAuthAuthenticationFilter.doFilter(GeoServerOAuthAuthenticationFilter.java:166)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerRoleFilter.doFilter(GeoServerRoleFilter.java:54)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:71)
        
org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
        
org.geoserver.security.filter.GeoServerSecurityContextPersistenceFilter$1.doFilter(GeoServerSecurityContextPersistenceFilter.java:52)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)
        
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
        
org.geoserver.security.GeoServerSecurityFilterChainProxy.doFilter(GeoServerSecurityFilterChainProxy.java:142)
        
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358)
        
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271)
        
org.geoserver.filters.XFrameOptionsFilter.doFilter(XFrameOptionsFilter.java:77)
        org.geoserver.filters.GZIPFilter.doFilter(GZIPFilter.java:48)
        
org.geoserver.filters.SessionDebugFilter.doFilter(SessionDebugFilter.java:49)
        org.geoserver.filters.FlushSafeFilter.doFilter(FlushSafeFilter.java:42)
        
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)
        
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)

*Root Cause*

org.springframework.security.authentication.AuthenticationCredentialsNotFoundException:
 An Authentication object was not found in the SecurityContext
        
org.springframework.security.access.intercept.AbstractSecurityInterceptor.credentialsNotFound(AbstractSecurityInterceptor.java:379)
        
org.springframework.security.access.intercept.AbstractSecurityInterceptor.beforeInvocation(AbstractSecurityInterceptor.java:223)
        
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.invoke(FilterSecurityInterceptor.java:124)
        
org.springframework.security.web.access.intercept.FilterSecurityInterceptor.doFilter(FilterSecurityInterceptor.java:91)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:71)
        
org.springframework.security.web.access.ExceptionTranslationFilter.doFilter(ExceptionTranslationFilter.java:119)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:71)
        
org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:200)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.geoserver.security.filter.GeoServerUserNamePasswordAuthenticationFilter.doFilter(GeoServerUserNamePasswordAuthenticationFilter.java:122)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.oauth2.GeoServerOAuthAuthenticationFilter.doFilter(GeoServerOAuthAuthenticationFilter.java:166)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerRoleFilter.doFilter(GeoServerRoleFilter.java:54)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:71)
        
org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:105)
        
org.geoserver.security.filter.GeoServerSecurityContextPersistenceFilter$1.doFilter(GeoServerSecurityContextPersistenceFilter.java:52)
        
org.geoserver.security.filter.GeoServerCompositeFilter$NestedFilterChain.doFilter(GeoServerCompositeFilter.java:75)
        
org.geoserver.security.filter.GeoServerCompositeFilter.doFilter(GeoServerCompositeFilter.java:92)
        
org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:334)
        
org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:215)
        
org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:178)
        
org.geoserver.security.GeoServerSecurityFilterChainProxy.doFilter(GeoServerSecurityFilterChainProxy.java:142)
        
org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:358)
        
org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:271)
        
org.geoserver.filters.XFrameOptionsFilter.doFilter(XFrameOptionsFilter.java:77)
        org.geoserver.filters.GZIPFilter.doFilter(GZIPFilter.java:48)
        
org.geoserver.filters.SessionDebugFilter.doFilter(SessionDebugFilter.java:49)
        org.geoserver.filters.FlushSafeFilter.doFilter(FlushSafeFilter.java:42)
        
org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:201)
        
org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:119)

*Note* The full stack trace of the root cause is available in the server logs.

( 
https://osgeo-org.atlassian.net/browse/GEOS-11044#add-comment?atlOrigin=eyJpIjoiYzJjMjg4N2NkN2EzNGZjYTkyMmE0ODdkYzY5ZjUxZTkiLCJwIjoiaiJ9
 ) Add Comment ( 
https://osgeo-org.atlassian.net/browse/GEOS-11044#add-comment?atlOrigin=eyJpIjoiYzJjMjg4N2NkN2EzNGZjYTkyMmE0ODdkYzY5ZjUxZTkiLCJwIjoiaiJ9
 )

Get Jira notifications on your phone! Download the Jira Cloud app for Android ( 
https://play.google.com/store/apps/details?id=com.atlassian.android.jira.core&referrer=utm_source%3DNotificationLink%26utm_medium%3DEmail
 ) or iOS ( 
https://itunes.apple.com/app/apple-store/id1006972087?pt=696495&ct=EmailNotificationLink&mt=8
 ) This message was sent by Atlassian Jira (v1001.0.0-SNAPSHOT#100227- 
sha1:6a5b8c4 )
_______________________________________________
Geoserver-devel mailing list
Geoserver-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/geoserver-devel

Reply via email to