Uploaded image for project: 'Grouper'
  1. Grouper
  2. GRP-5324

jwt does not work with ws.security.prependToUserIdForSubjectLookup

    XMLWordPrintable

Details

    • Improvement
    • Resolution: Fixed
    • Minor
    • 4.11.0, 5.8.0
    • None
    • None
    • None

    Description

      Jeffrey Crawford
      I think I found a bug with the difference between basic auth and JWT auth. If you are using basic auth and you have the following set to a stem path to allow a basic auth user to be found:
      ws.security.prependToUserIdForSubjectLookup = etc:wsusers:
      then when doing basic auth, the system correctly prepends the value of whatever is in ws.security.prependToUserIdForSubjectLookup but the JWT method is looking up the user via the member_id and then trying to find the internal subject via the subject_id. However when the WS call tries to find the record, it’s adding the prepend string to the subject_id causing it to fail to be looked up, for example this is the subject_id the web service is trying to look up:
      etc:wsusers:81ede5d0e7b0444f9048e60a2fa19359
      instead of just:
      81ede5d0e7b0444f9048e60a2fa19359 (edited)

      Attachments

        Activity

          People

            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            chris.hyzer@at.internet2.edu Chris Hyzer (upenn.edu)
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: