Request body logging incompatible with Wicket Forms, OAuth security authentication, …

Description

Follow up to trouble shooting request body logging in an environment used to test the community openid-conmect plugin.

1. Configure OAuth open-id-connect authentication filter, I tested with ADFS

2. Use the authentication filter to secure the filter chain web/**

3. Enable GeoServer LoggingFilter with request header logging,

4. Result: Unable to edit simple wicked forms (example contact information, or refreshing the logs). The error message indicate “number of rows is required”.

4. Checking with a debugger LoggingFilter obtains an InputStream with no content (available() is 0, and read() is -1)

5. Removing the Open ID Connect Authentication filter from the service chain restores functionality

Environment

Tomcat 8.5

Activity

Details

Assignee

Reporter

Triage

Affects versions

Components

Priority

Created July 19, 2022 at 7:56 PM
Updated October 5, 2022 at 2:43 PM