Bamboo is failing to set the required request params when indicating that a request is a trusted apps request

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Low
    • 3.4.4, 4.0 M2
    • Affects Version/s: None
    • Component/s: None
    • None

      This is only causing issues when Bamboo is configured with Crowd for SSO. Crowd's SSO Authenticator is looking for a specific request parameter to validate that a request is coming via Trusted Apps.

      This value is being set, then unset through the bamboo authentication filter lifecycle.

      The specific code in Crowd that is doing the check is the following:

          private boolean isTrustedAppsRequest(HttpServletRequest request)
          {
              if (BaseLoginFilter.LOGIN_SUCCESS.equals(request.getAttribute(BaseLoginFilter.OS_AUTHSTATUS_KEY)))
              {
                  if (logger.isDebugEnabled())
                  {
                      logger.debug("User IS authenticated via previous filter/trusted apps");
                  }
                  return true;
              }
      
              return false;
          }
      

      Specifically

      "os_authstatus" = "success"

            Assignee:
            Marek Went (Inactive)
            Reporter:
            Justin Koke
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Created:
              Updated:
              Resolved: