场景:
在Windows服务器http://xyz:8000/ThirdParty/中安装了一个名为ThirdParty的Web应用程序。在同一台服务器中,安装了另一个名为Core的应用程序,并从该位置触发了ThirdParty应用程序URL。
因此,当Core应用程序触发ThirdParty应用程序时,ThirdParty应用程序将被加载到IE浏览器中。
问题:
考虑User1,使用自己的凭据登录服务器并访问Core应用程序。核心应用程序触发ThirdParty应用程序(相同的URL:http://xyz:8000/ThirdParty/),并且ThirdParty应用程序在IE浏览器中打开。
考虑另一个User2,使用他自己的凭据登录到同一服务器并访问Core应用程序并触发ThirdParty应用程序(相同的URL:http://xyz:8000/ThirdParty/)。 ThirdParty应用程序显示“禁止的错误”。
请考虑两个User1和User2在该服务器上都具有相同的权限。
以下是成功和失败生成的日志的区别:
成功
URL generated--> https://xyz/abc/def/sso/3791840170@f7088b83e3884a7996497d2bcaa3d206
[http-nio-8010-exec-5] DefaultListableBeanFactory - Returning cached instance of singleton bean 'groovyMarkupConfigurer'
[http-nio-8010-exec-5] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-5] JspServlet - JspEngine --> /WEB-INF/views/index.jsp
[http-nio-8010-exec-5] JspServlet - ServletPath: /WEB-INF/views/index.jsp
[http-nio-8010-exec-5] JspServlet - PathInfo: null
[http-nio-8010-exec-5] JspServlet - RealPath: null
[http-nio-8010-exec-5] JspServlet - RequestURI: /ThirdParty/WEB-INF/views//index.jsp
[http-nio-8010-exec-5] JspServlet - QueryString: abcd=3&efgh=328
[http-nio-8010-exec-5] HttpSessionEventPublisher - Publishing event: org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@6d3494]
[http-nio-8010-exec-5] HstsHeaderWriter - Not injecting HSTS header since it did not match the requestMatcher org.springframework.security.web.header.writers.HstsHeaderWriter$SecureRequestMatcher@5c684
[http-nio-8010-exec-5] HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
[http-nio-8010-exec-5] OpenEntityManagerInViewInterceptor - Closing JPA EntityManager in OpenEntityManagerInViewInterceptor
[http-nio-8010-exec-5] ExceptionTranslationFilter - Chain processed normally
[http-nio-8010-exec-5] SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
失败
URL generated--> https://xyz/abc/def/sso/3791840170@f7088b83e3884a7996497d2bcaa3d206
[Finalizer] ThreadSafeClientConnManager - Shutting down
[Finalizer] DefaultClientConnection - Connection 0.0.0.0:54326<->100.222.1.10:8090 closed
[Finalizer] ThreadSafeClientConnManager - Released connection is reusable.
[Finalizer] ConnPoolByRoute - Releasing connection [{tls}->http://proxy:8090->https://ThirdPartyUrl:443][null]
[Finalizer] DefaultClientConnection - Connection 0.0.0.0:54326<->100.222.1.10:8090 closed
[http-nio-8010-exec-1] DefaultListableBeanFactory - Returning cached instance of singleton bean 'groovyMarkupConfigurer'
[http-nio-8010-exec-1] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-1] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-1] DefaultListableBeanFactory - Invoking afterPropertiesSet() on bean with name '/index'
[http-nio-8010-exec-1] JspServlet - JspEngine --> /WEB-INF/views/index.jsp
[http-nio-8010-exec-1] JspServlet - ServletPath: /WEB-INF/views/index.jsp
[http-nio-8010-exec-1] JspServlet - PathInfo: null
[http-nio-8010-exec-1] JspServlet - RealPath: null
[http-nio-8010-exec-1] JspServlet - RequestURI: /ThirdParty/WEB-INF/views//index.jsp
[http-nio-8010-exec-1] JspServlet - QueryString: abcd=3&efgh=328
[http-nio-8010-exec-1] HttpSessionEventPublisher - Publishing event: org.springframework.security.web.session.HttpSessionCreatedEvent[source=org.apache.catalina.session.StandardSessionFacade@152a0a6]
[http-nio-8010-exec-1] DefaultListableBeanFactory - Returning cached instance of singleton bean 'delegatingApplicationListener'
[http-nio-8010-exec-1] HstsHeaderWriter - Not injecting HSTS header since it did not match the requestMatcher org.springframework.security.web.header.writers.HstsHeaderWriter$SecureRequestMatcher@5c684
[http-nio-8010-exec-1] HttpSessionSecurityContextRepository - SecurityContext is empty or contents are anonymous - context will not be stored in HttpSession.
[http-nio-8010-exec-1] OpenEntityManagerInViewInterceptor - Closing JPA EntityManager in OpenEntityManagerInViewInterceptor
[http-nio-8010-exec-1] DefaultListableBeanFactory - Returning cached instance of singleton bean 'delegatingApplicationListener'
[http-nio-8010-exec-1] ExceptionTranslationFilter - Chain processed normally
[http-nio-8010-exec-1] SecurityContextPersistenceFilter - SecurityContextHolder now cleared, as request processing completed
[datasource_2-CP housekeeper] HikariPool - datasource_2-CP - Before cleanup stats (total=5, active=0, idle=5, waiting=0)
[datasource_2-CP housekeeper] HikariPool - datasource_2-CP - After cleanup stats (total=5, active=0, idle=5, waiting=0)