Menu

#642 Proxied url are wrongfully translated on forwarded actions

Not planned
open
None
5
2016-04-27
2016-04-26
No

When using proxy as front end to OX web application URL are transformed to the target URL (proxied) when a forward action is performed.

The environment to reproduce this error requires a http server with proxy pass / reverse enabled. To understand the issue here is a case example.

  • Suppose that you have a server running OpenXava, the server URL is http://webapp.openxava.org.
  • There is an organization named acme, so the URL for the organization within the OpenXava Server will be http://webapp.openxava.org/o/acme.
  • It is required that the acme organization has its own URL, something like http://acme.own.com. So any user needs only to write acme.own.com on the browser address field to get to its organization space. This can be easily accomplished using a http server as the entry point. An apache server with a configured proxy pass between http://acme.own.com <-> http://webapp.openxava.org/o/acme will do that perfectly.
  • Now writing the address http://acme.own.com will open the organization space while keeping the acme.own.com as part of the host url address. That will remain true, until a forward action is performed.
  • To further ilustrate this behavior, here is the sequence of URL changes when using the Signin module (it has a forward action):
URL on browser Step Comment
http://acme.own.com Click enter on browser This will produce the default behavior in OpenXava for an organization without module
http://acme.own.com/o/acme/m/Signin Write the user and password The sign in action will execute a forward action to the default (or last) module
http://webapp.openxava.org/o/acme/m/FirstSteps While this URL is correct, the change of acme.own.com to webapp.openxava.org is not the desired behavior

So far, it seems that the root of URL wrong translation occurs within the inners of dwr's ajax requests handling code.

Discussion

  • Javier Paniza

    Javier Paniza - 2016-04-27
    • assigned_to: Federico Alcantara
     
  • Javier Paniza

    Javier Paniza - 2016-04-27

    Hi Federico,

    To fix this you don't need an automated test because it requires a special configuration difficult to include in the regular suite.

     

Log in to post a comment.