wolfd / pwm

PWM is an open source password self service application for LDAP directories. - exported from code.google.com/p/pwm
http://pwmdemo.weisberg.net/
0 stars 1 forks source link

Forgotten Password process does not remember logoutURL #583

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1. Navigate to Forgotten Password using following link - 
https://localhost/sps/public/ForgottenPassword?forwardURL=https%3A%2F%2Flocalhos
t%2Fdnn6%2F&logoutURL=https%3A%2F%2Flocalhost%2Fdnn6%2F
2. Search for valid user
3. Complete Secret questions and answers challenge for the user
4. Change Password for the user.
5. Click Continue to logout the user after password change

What is the expected output? What do you see instead?
Expected is the user is redirected to the logout URL which started the 
Forgotten Password flow.

Actual: The user is navigated to the default URL which in my case is 
https://localhost/

What version of PWM are you using?
PWM was build using Revision 713 of trunk

What ldap directory and version are you using?
I've tried this against OpenLDAP 2.4.23 and also Active Directory, both show 
same behaviour.

Please paste any error log messages below:
2014-06-30 10:39:24, pwm.SessionFilter, {n8} GET request for: 
/sps/public/ForgottenPassword  [10.65.89.251]
  forwardURL='http://localhost/dnn6/'
  logoutURL='http://localhost/dnn6/'
2014-06-30 10:39:24, pwm.SessionFilter, {n8} forwardURL parameter detected in 
request, setting session forward url to http://localhost/dnn6/ [10.65.89.251]
2014-06-30 10:39:24, pwm.SessionFilter, {n8} logoutURL parameter detected in 
request, setting session logout url to http://localhost/dnn6/ [10.65.89.251]

Original issue reported on code.google.com by bhav...@datacom.co.nz on 30 Jun 2014 at 2:27

Attachments:

GoogleCodeExporter commented 9 years ago
The actual behavior should read the user is navigated to 
https://localhost/sps/public/Logout which then is redirected https://localhost/ 
by the web server.

Original comment by bhav...@datacom.co.nz on 30 Jun 2014 at 2:40