Redirection lost after notification validation
This should have been fixed in %2.0.6 (#1861 (closed)) but the bug is still here.
How to reproduce:
- Connect to OIDC RP
- Redirection on LL::NG portal (which is OIDC Provider)
- Accept notifications -> Portal menu is displayed instead of been redirected to OIDC RP.
Some logs:
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [info] Session zGWUoIPMx20EFX3vr2pCI9W9e4IcHzWjlmGs21kyL/OxWteRnLcnNHCrmN/BLTfx/SM1b834iHs1NQsHg6V082w/Pg0HoHSmzm6r4gqqBwfEvWJPXj87gIHJ3ty1GbC+irQ9cSnRoKCy6U8G7PoyfA== can't be retrieved
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [info] Session cannot be tied: Invalid session ID: zGWUoIPMx20EFX3vr2pCI9W9e4IcHzWjlmGs21kyL/OxWteRnLcnNHCrmN/BLTfx/SM1b834iHs1NQsHg6V082w/Pg0HoHSmzm6r4gqqBwfEvWJPXj87gIHJ3ty1GbC+irQ9cSnRoKCy6U8G7PoyfA== at /usr/share/perl5/Lemonldap/NG/Common/Apache/Session/Generate/SHA256.pm line 49.
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Build URL https://connect.pfptnbdev.io/notifback
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Redirect 81.250.130.213 to portal (url was /notifback)
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] User not authenticated, Try in use, cancel redirection
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Start routing notifback
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Handler::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Check session validity from Handler
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Session timeout -> 72000
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Session _utime -> 1569599433
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] now -> 1569599448
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Session timeoutActivityInterval -> 60
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Session TTL = 71985
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-7
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-7
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-7
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-7 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-1
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-1
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-1
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-1 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-6 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-2
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-2
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-2
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-2 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-4
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-4
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-4
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-4 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-3
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-3
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-3
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-3 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Current pending notification has not been found
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-5
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] [notice] cleoud@worteks.com has accepted notification cgu-kroqi-batest-5
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Found 'whatToTrace' -> cleoud@worteks.com
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update cleoud@worteks.com persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Update sessionInfo notification_cgu-kroqi-batest-5
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Dump: $VAR1 = '1569599448';
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Try to get SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6 from Portal::Main::Run
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Return SSO session cf619bcabf922cd9a8e9681388620bcc2d5711f65e2a3b4a9cd5ab4c97c84ec6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-5 registered in persistent session
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Pending notification has been found and not accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Processing code ref
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Launching ::Plugins::Notifications::checkNotifDuringAuth
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v13
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v13 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v10
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v10 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v12
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v12 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-7
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-7 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-4
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-4 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-5
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-5 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v14-bis
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v14-bis was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v14
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v14 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-3
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-3 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v15
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v15 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-1
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-1 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v15-bis
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v15-bis was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-6
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-6 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v11
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v11 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-batest-2
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-batest-2 was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Get reference cgu-kroqi-v12-bis
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Notification cgu-kroqi-v12-bis was already accepted
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Processing code ref
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Calling autoredirect
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Check if Appslist has to be displayed
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Check if ChangePassword has to be displayed
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Check if LoginHistory has to be displayed
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Check if OidcConsents has to be displayed
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Check if Logout has to be displayed
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Skin returned: menu
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Calling sendHtml with template menu
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Starting HTML generation using /usr/share/lemonldap-ng/portal/templates/bootstrap/menu.tpl
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Sending /usr/share/lemonldap-ng/portal/templates/bootstrap/menu.tpl
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Apply following CORS policy :
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Access-Control-Allow-Origin
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] *
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Access-Control-Allow-Credentials
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] true
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Access-Control-Allow-Headers
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] *
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Access-Control-Allow-Methods
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] POST,GET
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Access-Control-Expose-Headers
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] *
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Access-Control-Max-Age
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] 86400
[Fri Sep 27 15:50:48 2019] [LLNG:10996] [debug] Apply following CSP : default-src 'self';img-src 'self' https://cdn.kroqi.fr data:;style-src https://cdn.kroqi.fr https://fonts.googleapis.com 'self' 'unsafe-inline';font-src *;connect-src 'self';script-src 'self' https://cdn.kroqi.fr;form-action *;frame-ancestors 'none';