[TAP5-1080] Page activation context lost when redirecting from HTTP to HTTPS due to the @Secure annotation

• Type: Bug
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 5.2, 5.1.0.5
• Fix Version/s: 5.2.0
• Component/s: tapestry-core
• Labels: ssl

Environment

bouil@maggie:~/Documents/workspace/tapestry-secure-test$ uname -a
Linux maggie 2.6.31-20-generic #58-Ubuntu SMP Fri Mar 12 05:23:09 UTC 2010 i686 GNU/Linux
bouil@maggie:~/Documents/workspace/tapestry-secure-test$ java -version
java version "1.6.0_16"
Java(TM) SE Runtime Environment (build 1.6.0_16-b01)
Java HotSpot(TM) Server VM (build 14.2-b01, mixed mode)

• Assignee: Ulrich Stärk
• Reporter: Nicolas Bouillon
• Created: 25/Mar/10 20:28
• Updated: 03/May/10 17:18
• Resolved: 03/May/10 08:55

Description

When using @Secure on a page, if we get the page in http, we are redirected to the https page. But the context path is lost.

Example :

bouil@maggie:~/Documents/workspace/tapestry-secure-test$ curl -k -v http://localhost:8080/World

• About to connect() to localhost port 8080 (#0)
• Trying ::1... connected
• Connected to localhost (::1) port 8080 (#0)
  > GET /World HTTP/1.1
  > User-Agent: curl/7.19.5 (i486-pc-linux-gnu) libcurl/7.19.5 OpenSSL/0.9.8g zlib/1.2.3.3 libidn/1.15
  > Host: localhost:8080
  > Accept: /
  >
  < HTTP/1.1 302 Found
  < Location: https://localhost:8443/
  < Content-Length: 0
  < Server: Jetty(6.1.10)
  <
• Connection #0 to host localhost left intact
• Closing connection #0
  bouil@maggie:~/Documents/workspace/tapestry-secure-test$

The Index.java page contains :

package org.bouil.tapestry.pages;

import org.apache.tapestry5.annotations.Property;
import org.apache.tapestry5.annotations.Secure;

@Secure
public class Index {

@Property
private String context;

public void onActivate(String context)

{ this.context = context; }

public String onPassivate()

{ return context; }

}