You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@shindig.apache.org by "impetus technologies (JIRA)" <ji...@apache.org> on 2008/07/10 11:26:31 UTC

[jira] Created: (SHINDIG-438) security token(fields separated by ":") generates error in RestServer

security token(fields separated by ":") generates error in RestServer
---------------------------------------------------------------------

                 Key: SHINDIG-438
                 URL: https://issues.apache.org/jira/browse/SHINDIG-438
             Project: Shindig
          Issue Type: Bug
          Components: RESTful API (PHP)
         Environment: Windows, Apache
            Reporter: impetus technologies


In security token each field is separated by " : " and gadget url itself contains " : ". In rest server security token is passed  by GET method, which results in
"st = john.doe:john.doe:7317:shindig:http://shindig/gadgets/files/samplecontainer/examples/SocialHelloWorld.xml:0". It results in wrong count in RestServlet.php and BasicSecurityTokenDecoder.php, and hence one needs to change the " count(explode(';', $stringToken)) == 6 " to " count(explode(';', $stringToken)) == 7 " to make Rest server work.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (SHINDIG-438) security token(fields separated by ":") generates error in RestServer

Posted by "impetus technologies (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-438?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

impetus technologies updated SHINDIG-438:
-----------------------------------------

    Attachment: RestServlet.php.patch
                GadgetDataServlet.php.patch
                BasicSecurityTokenDecoder.php.patch

It might be a solution for this issue, If we will use " ; " as separator instead of  " : " to generate security token. Patches are attached. Pls verify.

> security token(fields separated by ":") generates error in RestServer
> ---------------------------------------------------------------------
>
>                 Key: SHINDIG-438
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-438
>             Project: Shindig
>          Issue Type: Bug
>          Components: RESTful API (PHP)
>         Environment: Windows, Apache
>            Reporter: impetus technologies
>         Attachments: BasicSecurityTokenDecoder.php.patch, GadgetDataServlet.php.patch, RestServlet.php.patch
>
>
> In security token each field is separated by " : " and gadget url itself contains " : ". In rest server security token is passed  by GET method, which results in
> "st = john.doe:john.doe:7317:shindig:http://shindig/gadgets/files/samplecontainer/examples/SocialHelloWorld.xml:0". It results in wrong count in RestServlet.php and BasicSecurityTokenDecoder.php, and hence one needs to change the " count(explode(';', $stringToken)) == 6 " to " count(explode(';', $stringToken)) == 7 " to make Rest server work.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Commented: (SHINDIG-438) security token(fields separated by ":") generates error in RestServer

Posted by "Chris Chabot (JIRA)" <ji...@apache.org>.
    [ https://issues.apache.org/jira/browse/SHINDIG-438?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=12612451#action_12612451 ] 

Chris Chabot commented on SHINDIG-438:
--------------------------------------

I do recognize the problem being there, but i don't think switching to ';' is the propper solution, since the : notation is used in the wild, and in the java implementation too. The proper solution should be to urlencode the gadget url which turns ':' into '%3A', and thus avoids the problem.

If that's missing somewhere i'd be happy to receive a patch that fixes that!

> security token(fields separated by ":") generates error in RestServer
> ---------------------------------------------------------------------
>
>                 Key: SHINDIG-438
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-438
>             Project: Shindig
>          Issue Type: Bug
>          Components: RESTful API (PHP)
>         Environment: Windows, Apache
>            Reporter: impetus technologies
>         Attachments: BasicSecurityTokenDecoder.php.patch, GadgetDataServlet.php.patch, RestServlet.php.patch, samplecontainer.html.patch
>
>
> In security token each field is separated by " : " and gadget url itself contains " : ". In rest server security token is passed  by GET method, which results in
> "st = john.doe:john.doe:7317:shindig:http://shindig/gadgets/files/samplecontainer/examples/SocialHelloWorld.xml:0". It results in wrong count in RestServlet.php and BasicSecurityTokenDecoder.php, and hence one needs to change the " count(explode(';', $stringToken)) == 6 " to " count(explode(';', $stringToken)) == 7 " to make Rest server work.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Closed: (SHINDIG-438) security token(fields separated by ":") generates error in RestServer

Posted by "Chris Chabot (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-438?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Chris Chabot closed SHINDIG-438.
--------------------------------

    Resolution: Fixed

> security token(fields separated by ":") generates error in RestServer
> ---------------------------------------------------------------------
>
>                 Key: SHINDIG-438
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-438
>             Project: Shindig
>          Issue Type: Bug
>          Components: RESTful API (PHP)
>         Environment: Windows, Apache
>            Reporter: impetus technologies
>         Attachments: BasicSecurityTokenDecoder.php.patch, GadgetDataServlet.php.patch, RestServlet.php.patch, samplecontainer.html.patch
>
>
> In security token each field is separated by " : " and gadget url itself contains " : ". In rest server security token is passed  by GET method, which results in
> "st = john.doe:john.doe:7317:shindig:http://shindig/gadgets/files/samplecontainer/examples/SocialHelloWorld.xml:0". It results in wrong count in RestServlet.php and BasicSecurityTokenDecoder.php, and hence one needs to change the " count(explode(';', $stringToken)) == 6 " to " count(explode(';', $stringToken)) == 7 " to make Rest server work.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


[jira] Updated: (SHINDIG-438) security token(fields separated by ":") generates error in RestServer

Posted by "impetus technologies (JIRA)" <ji...@apache.org>.
     [ https://issues.apache.org/jira/browse/SHINDIG-438?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

impetus technologies updated SHINDIG-438:
-----------------------------------------

    Attachment: samplecontainer.html.patch

> security token(fields separated by ":") generates error in RestServer
> ---------------------------------------------------------------------
>
>                 Key: SHINDIG-438
>                 URL: https://issues.apache.org/jira/browse/SHINDIG-438
>             Project: Shindig
>          Issue Type: Bug
>          Components: RESTful API (PHP)
>         Environment: Windows, Apache
>            Reporter: impetus technologies
>         Attachments: BasicSecurityTokenDecoder.php.patch, GadgetDataServlet.php.patch, RestServlet.php.patch, samplecontainer.html.patch
>
>
> In security token each field is separated by " : " and gadget url itself contains " : ". In rest server security token is passed  by GET method, which results in
> "st = john.doe:john.doe:7317:shindig:http://shindig/gadgets/files/samplecontainer/examples/SocialHelloWorld.xml:0". It results in wrong count in RestServlet.php and BasicSecurityTokenDecoder.php, and hence one needs to change the " count(explode(';', $stringToken)) == 6 " to " count(explode(';', $stringToken)) == 7 " to make Rest server work.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.