[SLING-10456] adjust HTTP status code for invalid :redirect value for usermanager post requests

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: JCR Jackrabbit User Manager 2.2.14
• Assignee: Eric Norman
• Reporter: Eric Norman
• Created: 03/Jun/21 21:04
• Updated: 10/Jun/21 18:28
• Resolved: 03/Jun/21 21:42

Description

When the usermanager servlets receive an illegal or invalid :redirect parameter it should return a status code of 422 instead of 200 because the request was not fully successful.

Currently, the illegal :redirect parameter value is detected and a warning is logged.  The request continues to be processed without the redirect occurring.  The client has no indication that something went wrong without reviewing the server logs.

For example:

Illegal redirect 

curl -F displayName=updated -F :redirect=https://sling.apache.org http://localhost:8080/system/userManager/user/testUser1.update.html

 invalid redirect

curl -F displayName=updated -F :redirect=https:// http://localhost:8080/system/userManager/user/testUser1.update.html

 

Issue Links

• links to: PR #6