Camunda Webapp login fails for HTTPS connection

[Biswajeet]

Hi There,

We have deployed Camunda webapp in openshift. We have enabled LDAP for camunda for login authorization. Earlier we were using HTTP route to our webapp and everything was working fine. We wanted to make our connection secure so recently we have created a new secure route on openshift. But After changing it to HTTPS we started getting below login error:

Login Failed: Cannot create a session after the response has been committed

Please find the log trace below:

2020-04-28 08:03:58.570 ERROR 8 --- [nio-9085-exec-7] o.a.c.c.C.[.[localhost].[/].[Admin Api]  : Servlet.service() for servlet [Admin Api] in context with path [] threw exception

java.lang.IllegalStateException: Cannot create a session after the response has been committed
	at org.apache.catalina.connector.Request.doGetSession(Request.java:2993) ~[tomcat-embed-core-9.0.27.jar!/:9.0.27]
	at org.apache.catalina.connector.Request.getSession(Request.java:2432) ~[tomcat-embed-core-9.0.27.jar!/:9.0.27]
	at org.apache.catalina.connector.RequestFacade.getSession(RequestFacade.java:908) ~[tomcat-embed-core-9.0.27.jar!/:9.0.27]
	at org.apache.catalina.connector.RequestFacade.getSession(RequestFacade.java:920) ~[tomcat-embed-core-9.0.27.jar!/:9.0.27]

We tried analysing it from our end but with no success. I would like to post some of our findings here but not sure whether those are related or not.
We noticed an weird differnce between HTTP and HTTPS call when invoking login page(Before even entering credentials)

Below image is of network calls made when HTTPS call was made:
You could see here that a new call for “camunda-welcome” gets initiated(Marked in Red) which was not the case when invoking through HTTP.

When invoking through HTTP, this camunda-welcome call never gets initiated.

We use below version of camunda:

<parent>
        <groupId>org.camunda.bpm.springboot.project</groupId>
        <artifactId>camunda-bpm-spring-boot-starter-root</artifactId>
        <version>3.4.0</version>
</parent>

Do we need to add any config to enable HTTPS authentication in camund. Are we missing some thing. Any type of help will appreciated. Thanks in advance.

Bella Ciao!

[jgigliotti]

Hi @Biswajeet,

I’m curious, did you happen to make any changes in addition to the HTTPS route? Perhaps to the web server config?

Per the documentation, I would expect the HTTPS route in OpenShift to behave more like a reverse proxy which would require little to no config on the web server side. I’m surprised it didn’t “just work”.

[Biswajeet]

Hi @jgigliotti,

No we haven’t made any additional changes other than just creating HTTPS route

[kamalakannanvkp]

Hi @jgigliotti @Biswajeet , i am too stuck at the same issue . we are also on openshift . We too face the same issue of , “Cannot create a session after the response has been committed”

Initially posted issue :

Engine API gives 500 Error

when we try to access the camunda task list page , the default filter loads on the LHS , the results of those filter are not displayed, instead when debugged it shows some other 500 error . URL of the Camunda task list page : https://site-bla-bla/camunda/app/tasklist/default/#/?searchQuery=[]&variableCaseHandling=all&filter=0c9e873e-d333-11ea-92dd-0a58c0a85414&sorting=[{"sortBy":"created","sortOrder":"desc"}] Error from console : Request : https://site-bla-bla/camunda/api/engine/engine/defa…

So , we I migrated from 7.11.0 to 7.13.0 ., but even that doesnot give any luck . Since after migration , my tasklist/cockpit page gives 403 error . I have posted the issues over here ,
is it possible to collate the observations across these 2 issues and provide us whats going wrong ?

403 on Camunda Tasklist view

Hello All , i have upgraded camunda version from 7.11.0 to 7.13.0 and do see 403 error when trying to access teh tasklist page . [image] Developer mode response : for loading the filter {“timestamp”:“2020-08-11T14:34:59.673+00:00”,“status”: 403 ,“error”:“Forbidden”,“message”:"",“path”:"/camunda/api/engine/engine/default/filter/29a51f0c-d8a2-11ea-a0e4-005056b32f3f/list"} Could someone help me what is the issue here ?

@aravindhrs / @Niall the main reason why we migrated from 7.11 to 7.13 to check if the new versions were provided with fix for the above isse what @Biswajeet and myself were facing.

[pradeep.poojari]

@Biswajeet @kamalakannanvkp were you able to resolve this issue. I am facing a similar issue when I run springboot in https .?

[kamalakannanvkp]

Yes, we managed to solve it , does it work in http before running on https ?

[pradeep.poojari]

Hi, @kamalakannanvkp I was able to reslove this issue.

[kamalakannanvkp]

Please put down the steps followed to resolve for the benefit of the others ?

[pradeep.poojari]

HI

My setup is a little different than yours. I followed the simple steps listed in this article to enable HTTPS mode.

How to enable HTTPS in a Spring Boot Java application

I log in to Camunda using SSO using JWT. Below is a code snippet HTTP security configure adapter

@Override
	protected void configure(HttpSecurity httpSecurity) throws Exception {
		httpSecurity.csrf()
		.csrfTokenRepository(CookieCsrfTokenRepository.withHttpOnlyFalse());
		httpSecurity.logout().disable().formLogin().disable()
				.addFilterAfter(new JwtTokenAuthenticationFilter(config), UsernamePasswordAuthenticationFilter.class)
				.authorizeRequests()
				.anyRequest().authenticated();
	}