You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@wicket.apache.org by "ASF subversion and git services (JIRA)" <ji...@apache.org> on 2017/04/24 21:23:04 UTC

[jira] [Commented] (WICKET-6360) WebSocket fails when url-based jsessionid is used

    [ https://issues.apache.org/jira/browse/WICKET-6360?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15981944#comment-15981944 ] 

ASF subversion and git services commented on WICKET-6360:
---------------------------------------------------------

Commit c0181dd0d41629997d37a6699e8c032ac17bec2a in wicket's branch refs/heads/master from [~mgrigorov]
[ https://git-wip-us.apache.org/repos/asf?p=wicket.git;h=c0181dd ]

WICKET-6360 WebSocket fails when url-based jsessionid is used

Manually append ';jsessionid=xyz' in the ws:// url when the session is tracked via URL or there is no cookie or the cookie value is invalid.

Works fine in Tomcat 8.5.13.
Fails on Jetty 9.4.4: https://github.com/eclipse/jetty.project/issues/1502


> WebSocket fails when url-based jsessionid is used
> -------------------------------------------------
>
>                 Key: WICKET-6360
>                 URL: https://issues.apache.org/jira/browse/WICKET-6360
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket-native-websocket
>    Affects Versions: 8.0.0-M5
>            Reporter: Don Ferguson
>            Assignee: Martin Grigorov
>
> When the session id is passed in the URL (versus in a cookie), the GET request to establish the websocket does not include the jsessionid parameter.
> The following snippet comes from the NGINX access.log:
> 198.27.205.33 - - [18/Apr/2017:16:24:46 +0000] "GET /quantumcamp/enrollment;jsessionid=10553zpxeq9lww6iq1qekcl17owsj195.10553?3 HTTP/1.1" 200 11818 "https://www.classprep.net/quantum
> camp/signin;jsessionid=10553zpxeq9lww6iq1qekcl17owsj195.10553?1" "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/5
> 37.36" "-"
> 198.27.205.33 - - [18/Apr/2017:16:24:46 +0000] "GET /wicket/websocket?pageId=3&wicket-ajax-baseurl=quantumcamp%2Fenrollment%3F3&wicket-app-name=wicket.classprep HTTP/1.1" 101 0 "-" "
> Mozilla/5.0 (Macintosh; Intel Mac OS X 10_12_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/57.0.2987.133 Safari/537.36" "-"
> Note the jsessionid in the initial request is not included in the websocket request.
> This manifests itself an the NPE:
> 2017-04-18 16:51:45,028 - WARN  - WebSocketSession           - 
> java.lang.NullPointerException
>         at org.apache.wicket.protocol.ws.api.AbstractWebSocketProcessor.<init>(AbstractWebSocketProcessor.java:104)
> This is easily reproduced.  Just disable cookies in your web browser.



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)