[SYNCOPE-1660] Anonymous requests does not store domain and delegatedBy information in the auth context

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.10
• Fix Version/s: 2.1.11, 3.0.0-M0
• Component/s: core
• Assignee: Francesco Chicchiriccò
• Reporter: Andrea Patricelli
• Created: 27/Jan/22 13:51
• Updated: 18/Mar/22 07:37
• Resolved: 27/Jan/22 15:09

Description

1. Define a new domain or take sample domain Two as reference
2. Create an user under that domain
3. Try to perform a requestPasswordReset, here is the call:

curl -X 'POST' \
  'http://host:port/syncope/rest/users/self/requestPasswordReset?username=myusername' \
  -H 'accept: */*' \
  -H 'X-Syncope-Domain: Two' \
  -H 'Content-Type: */*' \
  -d '' 

you'll get a "not found" error since domain is not tracked in the auth context.