IBM Support

PH56838: Creating a Token using an 'Auth Token Restriction' fails with 'An unknown error has occurred (HTTPS Status 500)'

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • Creating a Token using an 'Auth Token Restriction' fails with:
'An unknown error has occurred (HTTPS Status 500)'.

Using the udclient to create a Token referring to an
Authentication Token fails with:

udclient -username <name> -password <password> -weburl
https://<UCD_SERVER_HOSTNAME:PORT> createAuthToken -user
<tokenUser> -expireDate <dd-mm-yyy>-<hh:mm> -restriction
"<AUTH_TOKEN_RETRICTION_NAME" -allowedIps "<n>.<n>.<n>.<n>/<n>"

Cannot invoke "java.util.List.iterator()" because
"this.queryParams" is null

Steps to reproduce:
1) Create a 'Token Restriction'


Settings -> Token Restrictions -> Create Auth Token Restriction
->
Name: TokenRestriction
Method: All
URI: /rest/deploy/components/*

2) Create a not-'None' restriction Token:

Settings -> Tokens -> Create Token ->
Description: <something>
User: admin
Expiration Date: <couple years in to the future>
Expiration Time: 12:00
Auth Token Restriction: TokenRestriction
Save ->
Result:
An unknown error has occurred (HTTPS Status 500)


The following error appears in the the deployserver.out of the
UrbanCode Deploy Server

{"ts_utc":"2023-09-06T21:55:10.331Z",
"ts_loc":"2023-09-06T15:55:10.331-0600","lvl":"ERROR","thr":"htt
ps-jsse-nio-0.0.0.0-8443-exec-5","log":"com.urbancode.commons.we
b.filter.ExceptionHandlingFilter","msg":"java.lang.NullPointerEx
ception","ex_typ":"java.lang.NullPointerException","ex_msg":null
,"ex_trc":"java.lang.NullPointerException\r\n\tat
com.urbancode.security.token.VerbToUrl.toJsonObject(VerbToUrl.ja
va:121)\r\n\tat
com.urbancode.security.AuthToken.setVerbToUrlStorage(AuthToken.j
ava:291)\r\n\tat
com.urbancode.security.AuthToken.<init>(AuthToken.java:159)\r\n\
tat
com.urbancode.security.persistence.AuthTokenFactory.createTransi
entAuthToken(AuthTokenFactory.java:79)\r\n\tat
com.urbancode.security.persistence.AuthTokenFactory.createAuthTo
ken(AuthTokenFactory.java:59)\r\n\tat
com.urbancode.security.rest.token.AuthTokenResource.saveAuthToke
n(AuthTokenResource.java:132)\r\n\tat
com.urbancode.security.rest.token.AuthTokenResource_$$_jvstad7_7
._d53saveAuthToken(AuthTokenResource_$$_jvstad7_7.java)\r\n\tat
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(
Native Method)\r\n\tat
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(N
ativeMethodAccessorImpl.java:62)\r\n\tat
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invo
ke(DelegatingMethodAccessorImpl.java:43)\r\n\tat
java.base/java.lang.reflect.Method.invoke(Method.java:566)\r\n\t
at
org.glassfish.hk2.utilities.reflection.ReflectionHelper.invoke(R
eflectionHelper.java:1264)\r\n\tat
org.jvnet.hk2.internal.MethodInterceptorHandler$MethodInvocation
Impl.proceed(MethodInterceptorHandler.java:164)\r\n\tat
com.urbancode.ds.web.rest.TxInterceptionService$CommitAndBeginIn
terceptor.invoke(TxInterceptionService.java:212)\r\n\tat
org.jvnet.hk2.internal.MethodInterceptorHandler.invoke(MethodInt
erceptorHandler.java:97)\r\n\tat
com.urbancode.security.rest.token.AuthTokenResource_$$_jvstad7_7
.saveAuthToken(AuthTokenResource_$$_jvstad7_7.java)\r\n\tat
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke0(
Native Method)\r\n\tat
java.base/jdk.internal.reflect.NativeMethodAccessorImpl.invoke(N
ativeMethodAccessorImpl.java:62)\r\n\tat
java.base/jdk.internal.reflect.DelegatingMethodAccessorImpl.invo
ke(DelegatingMethodAccessorImpl.java:43)\r\n\tat
java.base/java.lang.reflect.Method.invoke(Method.java:566)\r\n\t
at
org.glassfish.jersey.server.model.internal.ResourceMethodInvocat
ionHandlerFactory.lambda$static$0(ResourceMethodInvocationHandle
rFactory.java:52)\r\n\tat
org.glassfish.jersey.server.model.internal.AbstractJavaResourceM
ethodDispatcher$1.run(AbstractJavaResourceMethodDispatcher.java:
124)\r\n\tat
org.glassfish.jersey.server.model.internal.AbstractJavaResourceM
ethodDispatcher.invoke(AbstractJavaResourceMethodDispatcher.java
:167)\r\n\tat
org.glassfish.jersey.server.model.internal.JavaResourceMethodDis
patcherProvider$TypeOutInvoker.doDispatch(JavaResourceMethodDisp
atcherProvider.java:219)\r\n\tat
org.glassfish.jersey.server.model.internal.AbstractJavaResourceM
ethodDispatcher.dispatch(AbstractJavaResourceMethodDispatcher.ja
va:79)\r\n\tat
org.glassfish.jersey.server.model.ResourceMethodInvoker.invoke(R
esourceMethodInvoker.java:475)\r\n\tat
org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(Re
sourceMethodInvoker.java:397)\r\n\tat
org.glassfish.jersey.server.model.ResourceMethodInvoker.apply(Re
sourceMethodInvoker.java:81)\r\n\tat
org.glassfish.jersey.server.ServerRuntime$1.run(ServerRuntime.ja
va:255)\r\n\tat
org.glassfish.jersey.internal.Errors$1.call(Errors.java:248)\r\n
\tat org.glassfish.jersey.internal.Errors

Local fix

  • Use the option '-restrictions' instead of '-restriction'
udclient -username <name> -password <password> -weburl
https://<UCD_SERVER_HOSTNAME:PORT> createAuthToken -user
<tokenUser> -expireDate <dd-mm-yyy>-<hh:mm> -restrictions
"<AUTH_TOKEN_RETRICTION_NAME" -allowedIps "<IPADDRESS>/<COUNT>"

Problem summary

  • ****************************************************************
* USERS AFFECTED:                                              *
* UrbanCode Deploy Web UI Users                                *
****************************************************************
* PROBLEM DESCRIPTION:                                         *
* (webUI)Creating a Token using an 'Auth Token Restriction'    *
* fails with 'An unknown error has occurred (HTTPS Status      *
* 500)'                                                        *
****************************************************************
* RECOMMENDATION:                                              *
* Fix is provided in IBM UrbanCode Deploy 8.0.0.0              *
****************************************************************

Problem conclusion

  • Fix is provided in IBM UrbanCode Deploy 8.0.0.0

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PH56838
    • 

  • Reported component name
    UC DEPLOY
    • 

  • Reported component ID
    5725M5400
    • 

  • Reported release
    731
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2023-09-08
    • 

  • Closed date
    2024-01-10
    • 

  • Last modified date
    2024-01-10
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    • 



Fix information


    

  • Fixed component name
    UC DEPLOY
    • 

  • Fixed component ID
    5725M5400
    • 



Applicable component levels


    








      
              
                            

              

              [{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SS4GSP","label":"IBM UrbanCode Deploy"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"731","Line of Business":{"code":"LOB45","label":"Automation"}}]
              

                                                                    

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            10 January 2024
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback