search

frankframework / frankframework

The Frank!Framework is an easy-to-use, stateless integration framework which allows (transactional) messages to be modified and exchanged between different systems.
https://frankframework.org
Apache License 2.0
130 stars 78 forks source link

403 Forbidden - After migrating to Frank version v9.0.0-20241124.042330 and tomcat 10 #7993

Open ramanjulu-decos opened 1 week ago

ramanjulu-decos commented 1 week ago

Current Behavior

image

Expected Behavior

Should give us 200

Environment Information

Local development environment

Steps To Reproduce

No response

Configuration

No response

Input

No response

What database are you using?

No response

What browsers are you seeing the problem on?

No response

Relevant Log Output

No response

Anything else?

No response

nielsm5 commented 1 week ago

Do you have any form of authentication configured? Is everything else working?

ramanjulu-decos commented 1 week ago

@nielsm5 Yes, it's Oauth2 configuration in place, which is using ADFS.

nielsm5 commented 1 week ago

And you have a oauth-role-mapping.properties file to map roles/scopes to the application roles?

IbisObserver=SCOPE_openid
IbisAdmin=SCOPE_role_a
IbisDataAdmin=SCOPE_role_b
IbisTester=SCOPE_role_c

It's very peculiar that an endpoint which only requires 1 role to be present to return a 403.

ramanjulu-decos commented 1 week ago

@nielsm5 release 8.2 has that configuration file

image

But master branch doesn't have it

image

nielsm5 commented 4 days ago

@nielsm5 release 8.2 has that configuration file

But master branch doesn't have it

Hi Ram,

That's because it was an example file and gives logged in users all access by default. It was not possible to overwrite these settings in certain docker situations, which is why we've opted to remove it.

You can add this file to your resource folder and change the role to scope mapping according to your preferences.

I've created #8030 to clarify the change.