[NXP-12491] Unable to use download file with direct link (plugin login-cas) - Nuxeo Issue Tracker

Details

Type: Bug
Status: Resolved
Priority: Critical
Resolution: Duplicate
Affects Version/s: 5.6.0-HF17, 5.6.0-HF22
Fix Version/s: 5.9.2
Component/s: Authentication

Tags:
- nuxeo-platform-login-cas

Description

Hello,

i'm french and my university use Nuxeo 5.6 with connect.

We have a bug for download file after login with Nuxeo 5.6 HF17 and the plugin login-cas (We used a sso-server cas server 3.5) :

direct download link on green arrow on the ressources nuxeo don't work after login...

nuxeo redirect on the home page of nuxeo (the guest page...)

with firefox it don't work

with google chrome it works fine

we publish links on websites and communicate links via e-mails...

example of a link : https://nuxeo.univ.fr/nuxeo/nxfile/default/12f0442a-a6a0-460 f-a518-900326de9409/blobholder:0/fichier.pdf

here is the configuration file with nuxeo-platform-login-cas-5.5.0-HF11.jar

esup-login-cas.xml

<?xml version="1.0"?>
<component name="org.esup.ecm.login">

<!-- certains composants doivent Ãªtre chargÃ©s avant que ce fichier soit lu car ils contiennent des points d'extension sur l'authentification -->
<require>org.nuxeo.ecm.platform.ui.web.auth.defaultConfig</require >
<require>org.nuxeo.ecm.platform.ui.web.auth.WebEngineConfig </require>
<require>org.nuxeo.ecm.platform.login.Cas2SSO</require>

<extension target="  org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenti cationService " point="authenticators">
 <authenticationPlugin name="CAS2_AUTH">
    <loginModulePlugin>Trusting_LM</loginModulePlugin>
    <needStartingURLSaving>true</needStartingURLSaving>
    <parameters>
         <!-- variable contenant le ticket dans l'url -->
        <parameter name="ticketKey">ticket</parameter>
         <!-- si utilisation du mode proxy -->
        <parameter name="proxyKey">ticket</parameter>

         <parameter name="appURL">[url]https://nuxeo.univ.fr/nuxeo/nxstartup.faces[/url]</parameter>
          <!-- URL de login du serveur CAS -->
         <parameter name="serviceLoginURL">[url]https://cas.univ.fr/login[/url]</parameter>
          <!-- URL de validation du ticket du serveur CAS -->
        <parameter name="serviceValidateURL">[url]https://cas.univ.fr/serviceValidate[/url]</parameter>
          <!-- Si utilisation de CAS en mode proxy -->
          <parameter name="proxyValidateURL">[url]https://cas.univ.fr/proxyValidate[/url]</parameter>
          <!-- variable contenant le nom du service dans l'URL -->
          <parameter name="serviceKey">service</parameter>
           <!-- URL de logout de CAS -->
        <parameter name="logoutURL">[url=https://cas.univ.fr/logout?service=https://nuxeo.univ.fr/nuxeo/]  https://cas.univ.fr/logout?service=https://nuxeo.univ.fr/nux eo/[/url]</parameter>

     </parameters>
   </authenticationPlugin>

   <authenticationPlugin name="ANONYMOUS_AUTH_FOR_CAS2" enabled="true" class="  org.nuxeo.ecm.platform.ui.web.auth.cas2.AnonymousAuthenticat orForCAS2 " >
        <loginModulePlugin>Trusting_LM</loginModulePlugin>
   </authenticationPlugin>
</extension>

<!-- chainage de l'authentification : on garde une authentification de type BASIC pour les accÃ¨s particuliers (RSS/cmis/contentAutomation)-->
<extension target="  org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenti cationService " point="chain">
        <authenticationChain>
            <plugins>
                <plugin>BASIC_AUTH</plugin>
                <plugin>CAS2_AUTH</plugin>
                <plugin>ANONYMOUS_AUTH_FOR_CAS2</plugin>
            </plugins>
        </authenticationChain>
</extension>

<extension target="  org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenti cationService " point="startURL">

    <startURLPattern>
      <patterns>
        <pattern>logout</pattern>
      </patterns>
    </startURLPattern>
</extension>

</component>

here is the configuration file with nuxeo-platform-login-cas2-5.6.0-HF22.jar

CAS2-config.xml

<component name="org.nuxeo.ecm.platform.authenticator.cas2.sso.config" >

  <require>org.nuxeo.ecm.platform.ui.web.auth.WebEngineConfig </require>
  <require>org.nuxeo.ecm.platform.login.Cas2SSO</require>

  <!-- Configure you CAS server parameters -->
  <extension target="  org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenti cationService " point="authenticators">
    <authenticationPlugin name="CAS2_AUTH">
      <loginModulePlugin>Trusting_LM</loginModulePlugin>
      <needStartingURLSaving>true</needStartingURLSaving>
      <parameters>
        <parameter name="ticketKey">ticket</parameter>
        <parameter name="appURL">[url]https://nuxeo.univ.fr/nuxeo/nxstartup.faces[/url]</parameter>
        <parameter name="serviceLoginURL">[url]https://cas.univ.fr/login[/url]</parameter>
        <parameter name="serviceValidateURL">[url]https://cas.univ.fr/serviceValidate[/url]</parameter>
        <parameter name="serviceKey">service</parameter>
        <parameter name="logoutURL">[url=https://cas.univ.fr/logout?service=https://nuxeo.univ.fr/nuxeo/]  https://cas.univ.fr/logout?service=https://nuxeo.univ.fr/nux eo/[/url]</parameter>
      </parameters>
    </authenticationPlugin>


  </extension>

  <!-- Include CAS2 into authentication chain -->
  <extension target="  org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenti cationService " point="chain">
    <authenticationChain>
      <plugins>
        <plugin>BASIC_AUTH</plugin>
        <plugin>CAS2_AUTH</plugin>
        <plugin>ANONYMOUS_AUTH</plugin>
      </plugins>
    </authenticationChain>
  </extension>

  <extension target="  org.nuxeo.ecm.platform.ui.web.auth.service.PluggableAuthenti cationService " point="startURL">
    <startURLPattern>
      <patterns>
        <pattern>logout</pattern>
      </patterns>
    </startURLPattern>
  </extension>


</component>

Attachments

Issue Links

is duplicated by

NXP-13464 Unable to download a blob after getting an error with anonymous due to missing permissions

Resolved

Unable to use download file with direct link (plugin login-cas)

Details

Description

Attachments

Issue Links

Activity

People

Dates