[jira] [Commented] (WICKET-6929) User forced to log in twice after checking WebClientInfo

["Sven Meier (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/WICKET-6929?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17438958#comment-17438958 ] 

Sven Meier commented on WICKET-6929:
------------------------------------

I've tried your quickstart on Firefox and Chrome and both worked fine.

On which server do you run your application?

Please try whether it works with Jetty for you too:

 
{code:java}
import org.eclipse.jetty.server.HttpConfiguration;
import org.eclipse.jetty.server.HttpConnectionFactory;
import org.eclipse.jetty.server.Server;
import org.eclipse.jetty.server.ServerConnector;
import org.eclipse.jetty.webapp.WebAppContext;
public class Start
{
public static void main(String[] args) throws Exception
 {
 System.setProperty("wicket.configuration", "development");
Server server = new Server();
HttpConfiguration http_config = new HttpConfiguration();
 http_config.setSecureScheme("https");
 http_config.setSecurePort(8443);
 http_config.setOutputBufferSize(32768);
ServerConnector http = new ServerConnector(server, new HttpConnectionFactory(http_config));
 http.setPort(8080);
 http.setIdleTimeout(1000 * 60 * 60);
server.addConnector(http);
WebAppContext bb = new WebAppContext();
 bb.setServer(server);
 bb.setContextPath("/");
 bb.setWar("src/main/webapp");
server.setHandler(bb);
try
 {
 server.start();
 server.join();
 }
 catch (Exception e)
 {
 e.printStackTrace();
 System.exit(100);
 }
 }
}
{code}
needs dependencies:
{code:java}
<dependency>
 <groupId>org.eclipse.jetty</groupId>
 <artifactId>jetty-server</artifactId>
 <scope>runtime</scope>
 <version>9.4.42.v20210604</version>
 </dependency>
 <dependency>
 <groupId>org.eclipse.jetty</groupId>
 <artifactId>jetty-webapp</artifactId>
 <scope>runtime</scope>
 <version>9.4.42.v20210604</version>
</dependency>{code}
 

 

> User forced to log in twice after checking WebClientInfo
> --------------------------------------------------------
>
>                 Key: WICKET-6929
>                 URL: https://issues.apache.org/jira/browse/WICKET-6929
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket-core
>    Affects Versions: 9.5.0
>         Environment: Windows 10 Enterprise, JDK 11.0.7, NetBeans 11.3 and Payara 5.201
>            Reporter: Sushila Burgess
>            Priority: Minor
>              Labels: WebClientInfo
>         Attachments: icase_debug.zip
>
>   Original Estimate: 24h
>  Remaining Estimate: 24h
>
> We found that in Wicket 9, an intermittent error occurred which forced our users 
>  to log in twice, even though they were definitely already correctly logged in 
>  and their session had not expired. (This error did not occur in Wicket 1.5.)
> We have found that this error is associated with checking WebClientInfo 
>  properties. In the course of redirection to and from BrowserInfoPage, it seems 
> as if the user's login credentials somehow get lost.
> We have found a work-round, which is to check WebClientInfo properties before 
>  login. However, the disadvantage of this is that every single user sees the 
>  following message for perhaps a second as they first log in:
> "If you see this, it means both JavaScript and meta-refresh are not support by 
>  your browser configuration. Please click this link to continue to the original 
>  destination."
> We have attempted to reproduce this error in a simple quick-start application. 
>  We can reproduce it reliably on first opening *Chrome* or *Edge* on *localhost*.
>  In the current, simple application, we cannot reproduce it when visiting a URL 
>  with a fully qualified domain name, but it did occur, intermittently, in the 
>  full-scale application.
> The quick-start application is attached as a zip file. Please see the README.txt of that application for a few more details.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)