[QPID-8176] [Broker-J][WMC] Infinite loop in Web Management Console restart operation when OAuth2 authentication provider is configured on http port

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: qpid-java-broker-7.0.3, qpid-java-broker-7.0.2, qpid-java-broker-7.0.0, qpid-java-broker-7.0.1
• Fix Version/s: qpid-java-broker-7.0.4
• Assignee: Keith Wall
• Reporter: Alex Rudyy
• Created: 27/Apr/18 14:37
• Updated: 02/Jun/18 21:33
• Resolved: 01/May/18 14:37

Description

An implementation of restart operation after invoking of restart method via broker REST API sends periodically requests to "/" in order to check whether broker can respond which would be an indication of finishing the restart.
When OAuth2-based authentication provider is configured, it tries to authenticate the request and sends the redirects to authorization and token endpoints. Browsers always follow redirects for XHRs or fetch requests, but the redirects can end-up in failure due to issues with origin. As WMC request to "/" failed, it is repeated again but none of the attempts can be finished successfully. Thus, the loop became indefinite.