search

GluuFederation / cloud-native-edition

Cloud Native Edition repository
https://gluu.org/docs/gluu-server/latest/installation-guide/install-kubernetes/
Apache License 2.0
33 stars 26 forks source link

fix: stale request error when having multiple pod replicas #571

Closed iromli closed 1 year ago

iromli commented 1 year ago

Describe the bug

A clear and concise description of what the bug is.

To Reproduce Steps to reproduce the behavior:

  1. Deploy Gluu 4.5.x
  2. Choose istio (as the ingress) during installation
  3. Enable oxShibboleth/SAML during installation
  4. Wait for installation finished
  5. Add TrustRelationship, i.e. https://sptest.iamshowcase.com/instructions
  6. Scale oxShib pod to 2 replicas
  7. Run SAML flow
  8. See stale request/session error

Expected behavior

No error during flow.

Additional context

Output from web pages during stale request/session error:

Web Login Service - Stale Request

You may be seeing this page because you used the Back button while browsing a secure web site or application. 
Alternatively, you may have mistakenly bookmarked the web login form instead of the actual web site you wanted to bookmark or used a link created by somebody else who made the same mistake.

Left unchecked, this can cause errors on some browsers or result in you returning to the web site you tried to leave, so this page is presented instead.

and

Sorry, it looks like there is a problem finding your session. 
This can happen if you waited too long on the login page, or if you were redirected to a different server that issued the original request. 
This error usually goes away if you try accessing your desired application again.