[CXF-4082] Wrong realm calculation for relying party applications deployed in root context

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Component/s: Services
• Labels: IDP Plugin Tomcat

Environment

Tomcat 7.0.16
Fediz Tomcat Plugin 0.6-SNAPSHOT

• Estimated Complexity: Unknown
• Assignee: Oliver Wulff
• Reporter: Christian Stettler
• Created: 02/Feb/12 13:11
• Updated: 23/Apr/12 16:50
• Resolved: 03/Feb/12 15:56

Description

If the relying party application is deployed in the root context of Tomcat, the FederationAuthenticator is not able to correctly calculate the realm value used for the "wtrealm" request parameter of the IDP.

String requestUrl = request.getRequestURL().toString();
int ctxIn = requestUrl.indexOf(contextPath);
String realm = requestUrl.substring(0, ctxIn + contextPath.length() + 1);

The realm is wrongly calculated as "h":

https://localhost:9443/idp/?wa=wsignin1.0&wreply=http%3A%2F%2Flocalhost%3A8080%2Fsecure%2Ftest.html&wtrealm=h

Deploying the application in another context and adjusting the realm definition in RPClaims.xml helps.