Change in ovirt-engine[ovirt-engine-3.5]: userportal, webadmin: XSRF token generation fix

tnisan at redhat.com tnisan at redhat.com
Thu Aug 14 17:25:32 UTC 2014


Tal Nisan has submitted this change and it was merged.

Change subject: userportal,webadmin: XSRF token generation fix
......................................................................


userportal,webadmin: XSRF token generation fix

- Fix token generation to use session id instead of passed
  in jsessionid cookie, as that value might be stale. This
  prevents a lot of 500 errors in the log due to automatic
  login.

Change-Id: I3e9a234bada73873f398d4220808f573810440dc
Bug-Url: https://bugzilla.redhat.com/show_bug.cgi?id=1115918
Signed-off-by: Alexander Wels <awels at redhat.com>
---
A frontend/webadmin/modules/frontend/src/main/java/org/ovirt/engine/ui/frontend/server/gwt/OvirtXsrfTokenServiceServlet.java
M frontend/webadmin/modules/frontend/src/main/resources/META-INF/web-fragment.xml
2 files changed, 28 insertions(+), 1 deletion(-)

Approvals:
  Alexander Wels: Verified
  Vojtech Szocs: Looks good to me, approved



-- 
To view, visit http://gerrit.ovirt.org/31368
To unsubscribe, visit http://gerrit.ovirt.org/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I3e9a234bada73873f398d4220808f573810440dc
Gerrit-PatchSet: 2
Gerrit-Project: ovirt-engine
Gerrit-Branch: ovirt-engine-3.5
Gerrit-Owner: Alexander Wels <awels at redhat.com>
Gerrit-Reviewer: Alexander Wels <awels at redhat.com>
Gerrit-Reviewer: Einav Cohen <ecohen at redhat.com>
Gerrit-Reviewer: Tal Nisan <tnisan at redhat.com>
Gerrit-Reviewer: Vojtech Szocs <vszocs at redhat.com>
Gerrit-Reviewer: automation at ovirt.org
Gerrit-Reviewer: oVirt Jenkins CI Server



More information about the Engine-commits mailing list