Uploaded image for project: 'Artifactory Binary Repository'
  1. Artifactory Binary Repository
  2. RTFACT-15264

500 error - more than one filter - on download requests from browser using a crowd user

    Details

    • Type: Bug
    • Status: Resolved
    • Priority: Normal
    • Resolution: Fixed
    • Affects Version/s: 5.4.6, 5.5.2
    • Fix Version/s: 5.6.1
    • Component/s: Crowd, Web UI
    • Labels:
      None

      Description

      Reproduced on version 5.5.2 of Artifactory.
      On the request, there is the crowd session cookie and the basic authentication header (see attached screenshot with the reproduction on Firefox).
      To reproduce:
      Need to force authentication when trying to directly download an artifact .
      So first, take a direct link and try to download (request to authenticate will pop up in the browser to give the crowd user credentials).
      Then on the ui, open another tab for the Artifactory UI and login with the crowd user - this will create the crowd session cookie.
      consecutive downloads when disabling the cache will give the error.

      exception

      java.lang.RuntimeException: more than one filter accepted this request
      	org.artifactory.webapp.servlet.authentication.ArtifactoryAuthenticationFilterChain.acceptFilter(ArtifactoryAuthenticationFilterChain.java:115)
      	org.artifactory.webapp.servlet.AccessFilter.doFilterInternal(AccessFilter.java:187)
      	org.artifactory.webapp.servlet.AccessFilter.doFilter(AccessFilter.java:165)
      	org.artifactory.webapp.servlet.RequestFilter.doFilter(RequestFilter.java:67)
      	org.springframework.session.web.http.SessionRepositoryFilter.doFilterInternal(SessionRepositoryFilter.java:164)
      	org.springframework.session.web.http.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:80)
      	org.artifactory.webapp.servlet.SessionFilter.doFilter(SessionFilter.java:62)
      	org.artifactory.webapp.servlet.ArtifactoryFilter.doFilter(ArtifactoryFilter.java:116)
      

        Attachments

          Activity

            People

            • Assignee:
              Unassigned
              Reporter:
              aviz Avi Zaig (Inactive)
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved: