This issue has been created
There is 1 update.
 
 
OpenId Connect / cid:jira-generated-image-avatar-e61ecd15-a44e-40d4-9901-0da99624d589 OIDC-323 Open

Authentication failing after removing a jar extension

 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-32aabe83-062a-4086-9c7a-a98a8abd5f5e Anca Luca created this issue on 12/Oct/26 14:09
 
Summary: Authentication failing after removing a jar extension
Issue Type: cid:jira-generated-image-avatar-e61ecd15-a44e-40d4-9901-0da99624d589 Bug
Affects Versions: 2.28.0
Assignee: Unassigned
Components: Authenticator
Created: 12/Oct/26 14:09
Priority: cid:jira-generated-image-static-major-42b770af-1653-4fd0-8890-7d6bf44b512f Major
Reporter: Anca Luca
Description:

This problem was reproduced with oidc authenticator 2.28.0 on XWiki 18.8.0 (and also 18.7.0 if I remember correctly).

steps to reproduce:

  • authenticator is installed and configured, authentication is working correctly
  • in extension manager, remove a jar extension (the easiest test is with raw macro extension, which can be installed and uninstalled for this purpose)
  • then, when trying to access the wiki (for example, the homepage), the following error is displayed:
    Error number 0 in 11: Uncaught exception
com.xpn.xwiki.XWikiException: Error number 0 in 11: Uncaught exception
	at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:661)
	at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:339)
	at com.xpn.xwiki.web.LegacyActionServlet.service(LegacyActionServlet.java:111)
	at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:124)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.wysiwyg.filter.ConversionFilter.doFilter(ConversionFilter.java:71)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.container.servlet.filters.internal.SetHTTPHeaderFilter.doFilter(SetHTTPHeaderFilter.java:65)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.resource.servlet.RoutingFilter.doFilter(RoutingFilter.java:135)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.container.servlet.filters.internal.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:240)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.container.servlet.filters.internal.SafeRedirectFilter.doFilter(SafeRedirectFilter.java:106)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.container.servlet.filters.internal.ResolveRelativeRedirectFilter.doFilter(ResolveRelativeRedirectFilter.java:129)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.container.servlet.filters.internal.SourceURLResolverFilter.doFilter(SourceURLResolverFilter.java:177)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:120)
	at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
	at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
	at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:165)
	at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:88)
	at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:492)
	at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:113)
	at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:83)
	at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:782)
	at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:72)
	at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
	at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399)
	at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
	at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:1272)
	at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1797)
	at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
	at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:973)
	at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:491)
	at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
	at java.base/java.lang.Thread.run(Thread.java:1583)
Caused by: org.infinispan.commons.IllegalLifecycleStateException: ISPN000323: Cache 'oidc.client.configuration' is in 'TERMINATED' state and so it does not accept new invocations. Either restart it or recreate the cache container.
	at org.infinispan.interceptors.impl.InvocationContextInterceptor.ignoreCommand(InvocationContextInterceptor.java:98)
	at org.infinispan.interceptors.impl.InvocationContextInterceptor.visitCommand(InvocationContextInterceptor.java:87)
	at org.infinispan.interceptors.impl.AsyncInterceptorChainImpl.invoke(AsyncInterceptorChainImpl.java:238)
	at org.infinispan.cache.impl.InvocationHelper.doInvoke(InvocationHelper.java:329)
	at org.infinispan.cache.impl.InvocationHelper.invoke(InvocationHelper.java:112)
	at org.infinispan.cache.impl.CacheImpl.get(CacheImpl.java:560)
	at org.infinispan.cache.impl.CacheImpl.get(CacheImpl.java:554)
	at org.infinispan.cache.impl.EncoderCache.get(EncoderCache.java:738)
	at org.xwiki.cache.infinispan.internal.InfinispanCache.get(InfinispanCache.java:97)
	at org.xwiki.contrib.oidc.auth.internal.store.OIDCClientConfigurationCache.get(OIDCClientConfigurationCache.java:97)
	at org.xwiki.contrib.oidc.auth.internal.store.DefaultOIDCClientConfigurationStore.getOIDCClientConfiguration(DefaultOIDCClientConfigurationStore.java:128)
	at org.xwiki.contrib.oidc.auth.internal.OIDCClientConfiguration.getWikiClientConfiguration(OIDCClientConfiguration.java:1811)
	at org.xwiki.contrib.oidc.auth.internal.OIDCClientConfiguration.getProperty(OIDCClientConfiguration.java:699)
	at org.xwiki.contrib.oidc.auth.internal.OIDCClientConfiguration.isTryLocalEnabled(OIDCClientConfiguration.java:1194)
	at org.xwiki.contrib.oidc.auth.OIDCAuthServiceImpl.getAuthenticator(OIDCAuthServiceImpl.java:98)
	at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:200)
	at org.xwiki.contrib.oidc.auth.OIDCAuthServiceImpl.checkAuth(OIDCAuthServiceImpl.java:118)
	at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:4469)
	at org.xwiki.security.authorization.internal.XWikiCachingRightService.authenticateUser(XWikiCachingRightService.java:233)
	at org.xwiki.security.authorization.internal.XWikiCachingRightService.checkAccess(XWikiCachingRightService.java:263)
	at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:4492)
	at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:6053)
	at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:547)
	... 52 more

A restart of the wiki restores the functionality.

It's possible that this is not reproducible directly or always (maybe it depends on other extensions installed on the wiki or other parameters).

 
 

1 update

 
cid:jira-generated-image-avatar-32aabe83-062a-4086-9c7a-a98a8abd5f5e Changes by Anca Luca on 12/Oct/26 14:10
 
Description: This problem was reproduced with oidc authenticator 2.28.0 on XWiki 18.8.0 (and also 18.7.0 if I remember correctly).

steps to reproduce:
* authenticator is installed and configured, authentication is working correctly
* in extension manager, remove a jar extension (the easiest test is with raw macro extension, which can be installed and uninstalled for this purpose)
* then, when trying to access the wiki (for example, the homepage), the following error is displayed:

{noformat}
    Error number 0 in 11: Uncaught exception
com.xpn.xwiki.XWikiException: Error number 0 in 11: Uncaught exception
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:661)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:339)
at com.xpn.xwiki.web.LegacyActionServlet.service(LegacyActionServlet.java:111)
at jakarta.servlet.http.HttpServlet.service(HttpServlet.java:658)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:193)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at com.xpn.xwiki.web.ActionFilter.doFilter(ActionFilter.java:124)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.wysiwyg.filter.ConversionFilter.doFilter(ConversionFilter.java:71)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.apache.tomcat.websocket.server.WsFilter.doFilter(WsFilter.java:51)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.container.servlet.filters.internal.SetHTTPHeaderFilter.doFilter(SetHTTPHeaderFilter.java:65)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.resource.servlet.RoutingFilter.doFilter(RoutingFilter.java:135)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.container.servlet.filters.internal.SavedRequestRestorerFilter.doFilter(SavedRequestRestorerFilter.java:240)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.container.servlet.filters.internal.SafeRedirectFilter.doFilter(SafeRedirectFilter.java:106)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.container.servlet.filters.internal.ResolveRelativeRedirectFilter.doFilter(ResolveRelativeRedirectFilter.java:129)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.container.servlet.filters.internal.SourceURLResolverFilter.doFilter(SourceURLResolverFilter.java:177)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.xwiki.container.servlet.filters.internal.SetCharacterEncodingFilter.doFilter(SetCharacterEncodingFilter.java:120)
at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:162)
at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:138)
at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:165)
at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:88)
at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:492)
at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:113)
at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:83)
at org.apache.catalina.valves.AbstractAccessLogValve.invoke(AbstractAccessLogValve.java:782)
at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:72)
at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:342)
at org.apache.coyote.http11.Http11Processor.service(Http11Processor.java:399)
at org.apache.coyote.AbstractProcessorLight.process(AbstractProcessorLight.java:63)
at org.apache.coyote.AbstractProtocol$ConnectionHandler.process(AbstractProtocol.java:1272)
at org.apache.tomcat.util.net.NioEndpoint$SocketProcessor.doRun(NioEndpoint.java:1797)
at org.apache.tomcat.util.net.SocketProcessorBase.run(SocketProcessorBase.java:52)
at org.apache.tomcat.util.threads.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:973)
at org.apache.tomcat.util.threads.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:491)
at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:63)
at java.base/java.lang.Thread.run(Thread.java:1583)
Caused by: org.infinispan.commons.IllegalLifecycleStateException: ISPN000323: Cache 'oidc.client.configuration' is in 'TERMINATED' state and so it does not accept new invocations. Either restart it or recreate the cache container.
at org.infinispan.interceptors.impl.InvocationContextInterceptor.ignoreCommand(InvocationContextInterceptor.java:98)
at org.infinispan.interceptors.impl.InvocationContextInterceptor.visitCommand(InvocationContextInterceptor.java:87)
at org.infinispan.interceptors.impl.AsyncInterceptorChainImpl.invoke(AsyncInterceptorChainImpl.java:238)
at org.infinispan.cache.impl.InvocationHelper.doInvoke(InvocationHelper.java:329)
at org.infinispan.cache.impl.InvocationHelper.invoke(InvocationHelper.java:112)
at org.infinispan.cache.impl.CacheImpl.get(CacheImpl.java:560)
at org.infinispan.cache.impl.CacheImpl.get(CacheImpl.java:554)
at org.infinispan.cache.impl.EncoderCache.get(EncoderCache.java:738)
at org.xwiki.cache.infinispan.internal.InfinispanCache.get(InfinispanCache.java:97)
at org.xwiki.contrib.oidc.auth.internal.store.OIDCClientConfigurationCache.get(OIDCClientConfigurationCache.java:97)
at org.xwiki.contrib.oidc.auth.internal.store.DefaultOIDCClientConfigurationStore.getOIDCClientConfiguration(DefaultOIDCClientConfigurationStore.java:128)
at org.xwiki.contrib.oidc.auth.internal.OIDCClientConfiguration.getWikiClientConfiguration(OIDCClientConfiguration.java:1811)
at org.xwiki.contrib.oidc.auth.internal.OIDCClientConfiguration.getProperty(OIDCClientConfiguration.java:699)
at org.xwiki.contrib.oidc.auth.internal.OIDCClientConfiguration.isTryLocalEnabled(OIDCClientConfiguration.java:1194)
at org.xwiki.contrib.oidc.auth.OIDCAuthServiceImpl.getAuthenticator(OIDCAuthServiceImpl.java:98)
at com.xpn.xwiki.user.impl.xwiki.XWikiAuthServiceImpl.checkAuth(XWikiAuthServiceImpl.java:200)
at org.xwiki.contrib.oidc.auth.OIDCAuthServiceImpl.checkAuth(OIDCAuthServiceImpl.java:118)
at com.xpn.xwiki.XWiki.checkAuth(XWiki.java:4469)
at org.xwiki.security.authorization.internal.XWikiCachingRightService.authenticateUser(XWikiCachingRightService.java:233)
at org.xwiki.security.authorization.internal.XWikiCachingRightService.checkAccess(XWikiCachingRightService.java:263)
at com.xpn.xwiki.XWiki.checkAccess(XWiki.java:4492)
at com.xpn.xwiki.XWiki.prepareDocuments(XWiki.java:6053)
at com.xpn.xwiki.web.XWikiAction.execute(XWikiAction.java:547)
... 52 more
{noformat}

A restart of the wiki restores the functionality.

It's possible that this is not reproducible directly or always (maybe it depends on other extensions installed on the wiki or other parameters).


Also, it's possible that this is an XWiki platform problem, not related to the oidc authenticator.