Веб-страница не загружается на сервер - PullRequest
0 голосов
/ 22 мая 2019

Сценарий:

Веб-приложение с именем ThirdParty установлено на сервере Windows http://xyz:8000/ThirdParty/. На этом же сервере установлено другое приложение с именем Core, откуда запускается URL-адрес приложения ThirdParty.

Поэтому, когда приложение Core запускает приложение ThirdParty, приложение ThirdParty загружается в браузер IE.

Проблема:

Рассмотрим User1, вошедшего на сервер со своими учетными данными и доступ к приложению Core. Приложение Core запускает приложение ThirdParty (тот же URL: http://xyz:8000/ThirdParty/), и приложение ThirdParty открывается в браузере IE.

Рассмотрим другого пользователя User2, вошедшего на тот же сервер со своими собственными учетными данными и получающего доступ к приложению Core и запускающего приложение ThirdParty (тот же URL: http://xyz:8000/ThirdParty/). Приложение ThirdParty отображает запрещенную ошибку.

Обратите внимание, что оба пользователя User1 и User2 имеют одинаковые права на этом сервере.

Вот разница журналов, созданных при успехе и при неудаче:


УДАЧИ


URL generated--> https://xyz/abc/def/sso/3791840170@f7088b83e3884a7996497d2bcaa3d206

[http-nio-8010-exec-5] DefaultListableBeanFactory - Returning cached instance of singleton bean 'groovyMarkupConfigurer'
[http-nio-8010-exec-5] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-5] JspServlet - JspEngine --> /WEB-INF/views/index.jsp
[http-nio-8010-exec-5] JspServlet -          ServletPath: /WEB-INF/views/index.jsp
[http-nio-8010-exec-5] JspServlet -             PathInfo: null
[http-nio-8010-exec-5] JspServlet -             RealPath: null
[http-nio-8010-exec-5] JspServlet -           RequestURI: /ThirdParty/WEB-INF/views//index.jsp
[http-nio-8010-exec-5] JspServlet -          QueryString: abcd=3&efgh=328
[http-nio-8010-exec-5] HttpSessionEventPublisher - Publishing event: org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@6d3494]
[http-nio-8010-exec-5] HstsHeaderWriter - Not injecting HSTS header since it did not match the requestMatcher org.springframework.security.web.header.writers.HstsHeaderWriter$SecureRequestMatcher@5c684
[http-nio-8010-exec-5] HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
[http-nio-8010-exec-5] OpenEntityManagerInViewInterceptor - Closing JPA EntityManager in OpenEntityManagerInViewInterceptor
[http-nio-8010-exec-5] ExceptionTranslationFilter - Chain processed normally
[http-nio-8010-exec-5] SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed

FAILURE


URL generated--> https://xyz/abc/def/sso/3791840170@f7088b83e3884a7996497d2bcaa3d206
[Finalizer] ThreadSafeClientConnManager - Shutting down
[Finalizer] DefaultClientConnection - Connection 0.0.0.0:54326<->100.222.1.10:8090 closed
[Finalizer] ThreadSafeClientConnManager - Released connection is reusable.
[Finalizer] ConnPoolByRoute - Releasing connection [{tls}->http://proxy:8090->https://ThirdPartyUrl:443][null]
[Finalizer] DefaultClientConnection - Connection 0.0.0.0:54326<->100.222.1.10:8090 closed
[http-nio-8010-exec-1] DefaultListableBeanFactory - Returning cached instance of singleton bean 'groovyMarkupConfigurer'
[http-nio-8010-exec-1] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-1] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-1] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-1] JspServlet - JspEngine --> /WEB-INF/views/index.jsp
[http-nio-8010-exec-1] JspServlet -          ServletPath: /WEB-INF/views/index.jsp
[http-nio-8010-exec-1] JspServlet -             PathInfo: null
[http-nio-8010-exec-1] JspServlet -             RealPath: null
[http-nio-8010-exec-1] JspServlet -           RequestURI: /ThirdParty/WEB-INF/views//index.jsp
[http-nio-8010-exec-1] JspServlet -          QueryString: abcd=3&efgh=328
[http-nio-8010-exec-1] HttpSessionEventPublisher - Publishing event: org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@152a0a6]
[http-nio-8010-exec-1] DefaultListableBeanFactory - Returning cached instance of singleton bean 'delegatingApplicationListener'
[http-nio-8010-exec-1] HstsHeaderWriter - Not injecting HSTS header since it did not match the requestMatcher org.springframework.security.web.header.writers.HstsHeaderWriter$SecureRequestMatcher@5c684
[http-nio-8010-exec-1] HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
[http-nio-8010-exec-1] OpenEntityManagerInViewInterceptor - Closing JPA EntityManager in OpenEntityManagerInViewInterceptor
[http-nio-8010-exec-1] DefaultListableBeanFactory - Returning cached instance of singleton bean 'delegatingApplicationListener'
[http-nio-8010-exec-1] ExceptionTranslationFilter - Chain processed normally
[http-nio-8010-exec-1] SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
[datasource_2-CP housekeeper] HikariPool - datasource_2-CP - Before cleanup stats (total=5, active=0, idle=5, waiting=0)
[datasource_2-CP housekeeper] HikariPool - datasource_2-CP - After cleanup  stats (total=5, active=0, idle=5, waiting=0)
...