JR52577: Invalid JSON response thrown when REST returns Invalid Token

APAR status

• Closed as program error.

Error description

• Error 400 "bad request" thrown when REST service returns
  CWXBB1010E Invalid activity token, because additional html is
  appeneded to the json response.
  

Local fix

Problem summary

• USERS AFFECTED:
  For customers who also send along both WCToken and
  WCTrustedToken when making loginidentity REST call.
  
  In fact, the normal practice, when calling loginidentity, is
  that no WCToken nor WCTrustedToken should be sent.
  
  PROBLEM ABSTRACT:
  Invalid JSON response thrown when REST returns Invalid Token
  
  BUSINESS IMPACT:
  Unable to parse the invalid JSON response resulted from
  loginidentity REST call.
  
  RECOMMENDATION:
  

Problem conclusion

• The loginidentity REST call was designed such that whenever a
  person related exception is thrown with an error code, the
  transaction is marked to commit.  This is to handle the case
  that invalid password provided causes an update to the
  PASSWORDRETRIES count.
  
  Since Target also provides the tokens when making loginidentity
  REST call, a person related exception with error code equals to
  1010 implying an invalid token is detected.  This transaction
  has been marked by the underlying person BOD as rollback only.
  A commit call will then cause error and causes other exception
  trace being added to the response.
  
  The code is modified so it will set commit mark to true only if
  error code is presented and does not equal to 1010.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WC BUS EDITION

• Fixed component ID

  5724I3800

Applicable component levels

• R700 PSY

     UP