Summary

Gravatar service is not working as expected

Version info

• Found in:
  • Crowd version 7.1.0

Description

The Gravatar option is not working as expected in Crowd.

Environment

Crowd version 7.1.0

Steps to Reproduce

1. Install Crowd version 7.1.0
2. Log in to Crowd with an admin user.
3. Go to General Options and tick the option to Use the Gravatar service for user avatars.

Expected Results

• With a valid user having a Gravatar account, their profile image will be pulled automatically

Actual Results

• The profile image is not pulled automatically (Open the web browser developers tools on the Console tool and observe the error message

Workaround

Similar in substance than https://jira.atlassian.com/browse/BAM-26231 works fine without issues as a workaround.

1. Download Byteman from the official site: Byteman Homepage - JBoss Community
2. Place the Byteman JARs (typically byteman.jar, byteman-install.jar and byteman-submit.jar) in a directory accessible to your Crowd nodes, e.g., <crowd-install>/tools/byteman/.
3. Create a coep-credentialless.btm file as described in BAM-26231 and place the file under <crowd-install>/tools/byteman/

   RULE Force COEP to credentialless (Tomcat)
   CLASS org.apache.catalina.connector.Response
   METHOD setHeader(java.lang.String, java.lang.String)
   AT ENTRY
   IF $1 != null && ($1.equals("Cross-Origin-Embedder-Policy") || $1.equals("Cross-Origin-Embedder-Policy-Report-Only"))
   DO $2 = "credentialless";
   ENDRULE

1. Add the following property to setenv.sh

   JAVA_OPTS="$JAVA_OPTS -javaagent:<crowd-install>/tools/byteman/byteman.jar=listener:true,script:<crowd-install>/tools/byteman/coep-credentialless.btm"
   

• • Cross-Origin-Embedder-Policy (COEP) header - HTTP MDN

Notes

Similar issue has been noted and fixed for Bamboo