Uploaded image for project: 'Sling'
  1. Sling
  2. SLING-5629

redirectAfterLogout prepends servlet context to the target, when it's already there

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Closed
    • Major
    • Resolution: Fixed
    • Auth Core 1.3.12
    • Auth Core 1.3.14
    • Authentication
    • None

    Description

      In SlingAuthenticator.redirectAfterLogout, a call is made to AuthUtil.isRedirectValid(request, target) which expects the target to contain the servlet context path.

      When the validation is made, the call for redirection appends the servlet context to the same target, leading to a duplicated context:
      Line 1417: response.sendRedirect(request.getContextPath() + target);

      Calling http://localhost:8080/dev/system/sling/logout?resource=/dev/content/node1.html redirects to http://localhost:8080/dev/dev/content/node1.html

      Attachments

        Issue Links

          Activity

            People

              cziegeler Carsten Ziegeler
              glucazeau Guillaume Lucazeau
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: