IBM Support

PH08872: THE SERVLETREQUEST.GETCONTEXTPATH() MIGHT RETURN A DIFFERENT CONTEXT PATH WHEN USING WITH OIDC CLIENT APPLICATION.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The user accesses an endpoint protected by OIDC security.
    After
    the client intercepts, receives auth code, exchanges for
    token,
    and presents token to original endpoint, the application
    will
    build relative links incorrectly.
    In the broken situation, application images and relative
    URIs
    are broken because they are getting /oidcclient/<resource>
    instead of /contextroot/<resource>.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:  All users of IBM WebSphere Application      *
    *                  Server Liberty                              *
    ****************************************************************
    * PROBLEM DESCRIPTION: ServletRequest.getContextPath() might   *
    *                      return wrong path when OpenID           *
    *                      Connection (OIDC) is used.              *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    After being authenticated with OIDC, the
    ServletRequest.getContextPath() API may return the OIDC
    application's context path (/oidcclient) instead of the target
    application's context path.
    

Problem conclusion

Temporary fix

Comments

APAR Information

  • APAR number

    PH08872

  • Reported component name

    WAS LIBERTY COR

  • Reported component ID

    5725L2900

  • Reported release

    855

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-02-21

  • Closed date

    2019-03-05

  • Last modified date

    2019-03-05

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WAS LIBERTY COR

  • Fixed component ID

    5725L2900

Applicable component levels

  • R855 PSY

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud \u0026 Data Platform"},"Product":{"code":"SSD28V","label":"WebSphere Application Server Liberty Core"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"855","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]

Document Information

Modified date:
14 October 2021