Skip to content

Conversation

@nvazquez
Copy link
Contributor

@nvazquez nvazquez commented Apr 1, 2022

Description

This PR calls the logout API before login, to cleanup any duplicate sessionkey, as it was done on the legacy UI: #4326
Fixes: #6127

Types of changes

  • Breaking change (fix or feature that would cause existing functionality to change)
  • New feature (non-breaking change which adds functionality)
  • Bug fix (non-breaking change which fixes an issue)
  • Enhancement (improves an existing feature and functionality)
  • Cleanup (Code refactoring and cleanup, that may add test cases)

Feature/Enhancement Scale or Bug Severity

Feature/Enhancement Scale

  • Major
  • Minor

Bug Severity

  • BLOCKER
  • Critical
  • Major
  • Minor
  • Trivial

Screenshots (if appropriate):

How Has This Been Tested?

@nvazquez
Copy link
Contributor Author

nvazquez commented Apr 1, 2022

@blueorangutan ui

@blueorangutan
Copy link

@nvazquez a Jenkins job has been kicked to build UI QA env. I'll keep you posted as I make progress.

@blueorangutan
Copy link

UI build: ✔️
Live QA URL: http://qa.cloudstack.cloud:8080/client/pr/6193 (SL-JID-1327)

@rohityadavcloud
Copy link
Member

The only case worth checking is the SAML based SSO mechanism, not sure if the login method is hit; otherwise LGTM

Copy link

@utchoang utchoang left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM!

Copy link
Member

@weizhouapache weizhouapache left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

code lgtm
I do not know if this fixes #6127

@rohityadavcloud rohityadavcloud merged commit 4193109 into apache:main Apr 6, 2022
RodrigoDLopez pushed a commit to RodrigoDLopez/cloudstack that referenced this pull request Aug 23, 2022
RodrigoDLopez added a commit to RodrigoDLopez/cloudstack that referenced this pull request Aug 23, 2022
ui: Logout before login (apache#6193)

See merge request scclouds/scclouds!264
shwstppr pushed a commit to shapeblue/cloudstack that referenced this pull request Mar 13, 2023
* Add EncryptedElementType key resolver to SAML plugin

* saml: Fix SAML SSO plugin redirect URL (apache#6457)

This PR fixes the issue apache#6427 -> SAML request must be appended to an IdP URL as a query param with an ampersand, if the URL already contains a question mark, as opposed to always assume that IdP URLs don't have any query params.
Google's IdP URL for instance looks like this: https://accounts.google.com/o/saml2/idp?idpid=<ID>, therefore the expected redirect URL would be https://accounts.google.com/o/saml2/idp?idpid=<ID>&SAMLRequest=<SAMLRequest>

This code change is backwards compatible with the current behaviour.

* Apply backport for SAML session cookie path

apache#6149

* ui: Logout before login (apache#6193)

This PR calls the logout API before login, to cleanup any duplicate sessionkey, as it was done on the legacy UI: apache#4326
Fixes: apache#6127

---------

Co-authored-by: Marcus Sorensen <mls@apple.com>
Co-authored-by: Luis Moreira <Luis-3M@users.noreply.github.com>
Co-authored-by: Nicolas Vazquez <nicovazquez90@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

No open projects
Status: Done

Development

Successfully merging this pull request may close these issues.

SSO fails with error "Expired session, missing signature, or missing apiKey"

5 participants