FWD » Documentation

01/23/2026

11:17 AM Support #9709: Needed: Basic example of configuring separate client and server

I also tried to set response headers like these Access-Control-Allow-Credentials and Access-Control-Allow-Origin with... Sergey Ivanovskiy

09:35 AM Support #9709 (Review): Needed: Basic example of configuring separate client and server

Greg Shah

09:30 AM Support #9709: Needed: Basic example of configuring separate client and server

@localStorage@ and @sessionStorage@ with the authentication header is not recommended approach but using secret key w... Sergey Ivanovskiy

09:20 AM Support #9709: Needed: Basic example of configuring separate client and server

Greg, could 9709b be reviewed at this stage because during the review these problems could be solved. Sergey Ivanovskiy

09:12 AM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> What do we need to do to finish this work and help get this into trunk sometime next week?
It ne... Sergey Ivanovskiy

09:03 AM Support #9709: Needed: Basic example of configuring separate client and server

What do we need to do to finish this work and help get this into trunk sometime next week? Greg Shah

08:10 AM Support #9709: Needed: Basic example of configuring separate client and server

Committed revision 16374(9709b) improved the web token validation logic in order to generate web token on the java we... Sergey Ivanovskiy

07:44 AM Support #9709: Needed: Basic example of configuring separate client and server

To be clear: these are the things that must be visible externally:
* FWD server's IP address and Jetty port
* FWD... Greg Shah

07:41 AM Support #9709: Needed: Basic example of configuring separate client and server

As stated previously, we must not base our networking on the concept that the containers will be accessible from the ... Greg Shah

04:04 AM Support #9709: Needed: Basic example of configuring separate client and server

> The server is visible to the broker (at least the first one) via port 3333 when I use the host name, even when runn... Sergey Ivanovskiy

01/22/2026

05:25 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> In production, orchestration tools like Kubernetes will be used in preference to Docker Compose. ... Roger Borrello

05:22 PM Support #9709: Needed: Basic example of configuring separate client and server

This committed revision 16373 (9709b) was tested with one of the customers large application, found issues related to... Sergey Ivanovskiy

11:58 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Why it cannot use the main web server certificate?
It will work, but we will need to doc... Constantin Asofiei

11:53 AM Support #9709: Needed: Basic example of configuring separate client and server

Why it cannot use the main web server certificate? Sergey Ivanovskiy

11:51 AM Support #9709: Needed: Basic example of configuring separate client and server

Something else to consider: if the iframe is served directly by the broker host, then each broker will require its ow... Constantin Asofiei

10:56 AM Support #9709: Needed: Basic example of configuring separate client and server

@bash@ please. Greg Shah

10:54 AM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> > Prepare the directory
> >
> > [...]
>
> Do we really need to use compose to prepare the di... Roger Borrello

10:35 AM Support #9709: Needed: Basic example of configuring separate client and server

Constantin: I agree that reverse proxy will be commonly used and often chosen. But I don't want to require reverse p... Greg Shah

10:33 AM Support #9709: Needed: Basic example of configuring separate client and server

> Prepare the directory
>
> ... Greg Shah

10:32 AM Support #9709: Needed: Basic example of configuring separate client and server

> > Why do you use https://localhost:7443/? You should use the server address and please check these conditions, all ... Greg Shah

10:19 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> I will check this later. The only idea is to use dedicatedMode = true. It should generate... Roger Borrello

09:50 AM Support #9709: Needed: Basic example of configuring separate client and server

Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Constantin, #9709-277 the second option can be used.
> I ... Sergey Ivanovskiy

09:38 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Constantin, #9709-277 the second option can be used.
I understand, but this is not just ... Constantin Asofiei

09:35 AM Support #9709: Needed: Basic example of configuring separate client and server

Constantin, #9709-277 the second option can be used. Sergey Ivanovskiy

09:18 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey, please create a diagram how the infrastructure will look when deploying FWD with brokers.
Greg: I understa... Constantin Asofiei

09:10 AM Support #9709: Needed: Basic example of configuring separate client and server

Constantin Asofiei wrote:
> From #10809-50:
> Sergey Ivanovskiy wrote:
> > Do you have ideas how to overcome usage... Sergey Ivanovskiy

09:00 AM Support #9709: Needed: Basic example of configuring separate client and server

From #10809-50:
Sergey Ivanovskiy wrote:
> Do you have ideas how to overcome usages of LAX cookies with cross-site ... Constantin Asofiei

05:17 AM Support #9709 (WIP): Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy

03:35 AM Support #9709: Needed: Basic example of configuring separate client and server

Greg, Hynek, from the Single_Sign_On documentation ... Sergey Ivanovskiy

02:14 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Sergey, revision 421 of Hotel GUI allows you to configure the docker compose very easily. Th... Sergey Ivanovskiy

02:09 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger, I have no idea, the accessibility conditions should be satisfied #9709-358 in order that the broker configurat... Sergey Ivanovskiy

01/21/2026

06:45 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey, revision 421 of Hotel GUI allows you to configure the docker compose very easily. The steps would be:
* Conv... Roger Borrello

04:28 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Why do you use https://localhost:7443/? You should use the server address and please chec... Roger Borrello

12:35 PM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > Roger, I am not aware of your environment and the correspondin... Sergey Ivanovskiy

12:18 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Roger, I am not aware of your environment and the corresponding setup but there are the f... Roger Borrello

03:41 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger, I am not aware of your environment and the corresponding setup but there are the following conditions that sho... Sergey Ivanovskiy

07:37 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey, in my docker compose configuration, I have 3 containers, the DB (hostname=hoteldb), the server (hostname=hote... Roger Borrello

01/20/2026

12:08 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek, could you help with spreadsheet testcase sample? I need to test how the spreadshee... Hynek Cihlar

08:45 AM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, could you help with spreadsheet testcase sample? I need to test how the spreadsheet resources are loaded with ... Sergey Ivanovskiy

01/19/2026

06:53 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> Container-related details should be #7275 or if you are trying to keep the details non-private, w... Roger Borrello

05:56 PM Support #9709: Needed: Basic example of configuring separate client and server

Committed revision 16355 (9709b). This is incomplete commit. Testing and fixing found issues related to query paramet... Sergey Ivanovskiy

01/16/2026

06:35 PM Support #9709: Needed: Basic example of configuring separate client and server

Committed rev 16353 (9709b) implemented the secure tokens (#9709-349). (@AuthHandler@ decrypts tokens generated by @p... Sergey Ivanovskiy

11:21 AM Support #9709: Needed: Basic example of configuring separate client and server

Code Review Task Branch 9709b Revisions 16351 and 16352
The logging changes are good. Greg Shah

05:19 AM Support #9709: Needed: Basic example of configuring separate client and server

I am implementing the following idea. The web client creates the @AES@ cryptographic key and delivers this key to @Au... Sergey Ivanovskiy

01/15/2026

05:53 PM Support #9709: Needed: Basic example of configuring separate client and server

Container-related details should be #7275 or if you are trying to keep the details non-private, we can create another... Greg Shah

05:44 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg, is this the proper place for discussion of the container configuration itself? I have the exact same docker-com... Roger Borrello

12:52 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg, I just follow #9709-283, #9709-284 and already did some changes in rev 16350 (9709b). This task needs to be com... Sergey Ivanovskiy

12:31 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> I think we've spent quite a bit of time on this and I'm not sure if we should continue this effor... Sergey Ivanovskiy

12:28 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> I need to transmit secure tokens as response headers but it is possible only to send them... Greg Shah

12:22 PM Support #9709: Needed: Basic example of configuring separate client and server

I need to transmit secure tokens as response headers but it is possible only to send them as template page parameters. Sergey Ivanovskiy

12:17 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, Constantin, please review the current rev 9709b. #9709-336 I have technical difficulties with the current impl... Sergey Ivanovskiy

01/14/2026

05:59 PM Support #9709: Needed: Basic example of configuring separate client and server

I believe I found the appropriate network setup for our GCD firewall that should allow the docker-compose network to ... Roger Borrello

03:30 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> Sergey Ivanovskiy wrote:
> > Roger, you can investigate the code of @BrokerManager.schedule@ and... Sergey Ivanovskiy

02:57 PM Support #9709: Needed: Basic example of configuring separate client and server

There is this experimental browsers API https://developer.mozilla.org/en-US/docs/Web/API/Private_State_Token_API that... Sergey Ivanovskiy

02:47 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, please help to gather all api that requires security token. We need to provide security token to get an access... Sergey Ivanovskiy

11:19 AM Support #9709: Needed: Basic example of configuring separate client and server

Now that the certificate was accepted, the second time I tried to get in, we are successful:
!9709_2nd_time_in_works... Roger Borrello

10:51 AM Support #9709: Needed: Basic example of configuring separate client and server

So without the proxy configured, we get a valid URL in our error:... Roger Borrello

10:45 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Roger Borrello wrote:
> directory. This didn't make any difference, because it turns out it... Roger Borrello

10:05 AM Support #9709: Needed: Basic example of configuring separate client and server

Greg, I meant that the reverse proxy server has its own configuration. The broker client and local web client looks s... Sergey Ivanovskiy

09:59 AM Support #9709: Needed: Basic example of configuring separate client and server

Some customers will not use reverse proxy but will use the complex containers. So we must support complex containers... Greg Shah

09:26 AM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> Sergey Ivanovskiy wrote:
> > Roger, I do not understand why you were using proxy. In our broker ... Roger Borrello

06:33 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Roger, you can investigate the code of @BrokerManager.schedule@ and add changes here to s... Greg Shah

06:32 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Roger, I do not understand why you were using proxy. In our broker configuration we do no... Greg Shah

03:40 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger, I do not understand why you were using proxy. In our broker configuration we do not use the proxy server. Sergey Ivanovskiy

07:14 PM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
directory. This didn't make any difference, because it turns out it was the same issue I disco... Roger Borrello

07:05 PM Support #9709: Needed: Basic example of configuring separate client and server

I was trying to work with a docker-compose setup and was not able the browser to the server. In this configuration, w... Roger Borrello

01/13/2026

06:06 PM Support #9709: Needed: Basic example of configuring separate client and server

I found that I did not test @LAX@ policy and committed into 9709b rev 16349 but cookie was blocked due to the LAX coo... Sergey Ivanovskiy

03:29 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Roger, you can investigate the code of @BrokerManager.schedule@ and add changes here to s... Roger Borrello

02:32 PM Support #9709: Needed: Basic example of configuring separate client and server

Roger, you can investigate the code of @BrokerManager.schedule@ and add changes here to see which one is selected for... Sergey Ivanovskiy

02:30 PM Support #9709: Needed: Basic example of configuring separate client and server

Actually, I disconnected one, came in again, and *broker1* was used... Not sure I know the algorithm, but I was just ... Roger Borrello

02:27 PM Support #9709: Needed: Basic example of configuring separate client and server

With a second broker configured, I connected from a second laptop on my network. It still went through the same broke... Roger Borrello

02:23 PM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Greg Shah wrote:
> > Yes, but especially the [[p2j:Remote Launchers]]
>
> Updated the *c... Roger Borrello

01/08/2026

05:38 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> Yes, but especially the [[p2j:Remote Launchers]]
Updated the *client.xml* section. I was looki... Roger Borrello

10:55 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Greg Shah wrote:
> > Roger: Based on your trials and tribulations with this, I think our do... Greg Shah

01/07/2026

05:45 PM Support #9709: Needed: Basic example of configuring separate client and server

Greg Shah wrote:
> Roger: Based on your trials and tribulations with this, I think our documentation needs edits. P... Roger Borrello

05:42 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> You could commit 16336 after 16337 to revert the changes.
I reverted to *16336* on xfe... Roger Borrello

08:17 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger: Based on your trials and tribulations with this, I think our documentation needs edits. Please write those ed... Greg Shah

01/06/2026

09:48 AM Support #9709: Needed: Basic example of configuring separate client and server

You could commit 16336 after 16337 to revert the changes. Sergey Ivanovskiy

09:46 AM Support #9709: Needed: Basic example of configuring separate client and server

I have a copy of 9709b on xfer.goldencode.com in @/opt/fwd/9709b@ that I want to revert to 16336 for now. Should I _u... Roger Borrello

09:40 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > From your logs I observed
> > [...]
> > that @remote:agent:d... Sergey Ivanovskiy

09:27 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> From your logs I observed
> [...]
> that @remote:agent:dedicatedMode=true@ but this par... Roger Borrello

09:21 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > Sergey Ivanovskiy wrote:
> > > Please use rev 16336 (9709b) b... Roger Borrello

08:42 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Sergey Ivanovskiy wrote:
> > Please use rev 16336 (9709b) because this cross-site cookie... Roger Borrello

08:02 AM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek, could you please explain or develop your idea more thorou... Sergey Ivanovskiy

04:48 AM Support #9709: Needed: Basic example of configuring separate client and server

From your logs I observed... Sergey Ivanovskiy

04:27 AM Support #9709: Needed: Basic example of configuring separate client and server

>I had <agent dedicatedMode="true"/> and was receiving localhost refused to connect. When I changed to "false" I now ... Sergey Ivanovskiy

04:21 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Please use rev 16336 (9709b) because this cross-site cookie is not permitted with rev 163... Sergey Ivanovskiy

01/05/2026

05:53 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> In respect to @dedicatedMode@ please test with this option and without the former. @dedic... Roger Borrello

04:25 PM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> I'm getting a much more favorable situation, only the browser is indicating localhost refuse... Roger Borrello

02:50 PM Support #9709: Needed: Basic example of configuring separate client and server

The @fwd_client_base_crash_20260105_144809.log@ contains *localhost* for @CLIENT:WEB:HOST@. I'm not sure where that c... Roger Borrello

02:45 PM Support #9709: Needed: Basic example of configuring separate client and server

I'm getting a much more favorable situation, only the browser is indicating localhost refused to connect. I have the ... Roger Borrello

02:24 PM Support #9709: Needed: Basic example of configuring separate client and server

Yes, that should work. Constantin Asofiei

01:52 PM Support #9709: Needed: Basic example of configuring separate client and server

Constantin Asofiei wrote:
> You also need a @bzr clean-tree --force@ to be sure you get a clean branch.
So this i... Roger Borrello

01:40 PM Support #9709: Needed: Basic example of configuring separate client and server

You also need a @bzr clean-tree --force@ to be sure you get a clean branch. Constantin Asofiei

01:39 PM Support #9709: Needed: Basic example of configuring separate client and server

Yikes... The @dbash.sh@ @fwd_update.sh@ tool was using the xfer location, which I created with the standard tool scri... Roger Borrello

01:16 PM Support #9709: Needed: Basic example of configuring separate client and server

Roger Borrello wrote:
> Am I receiving the below due to Java 17 updates or your updates?
> [...]
>
> Perhaps I n... Constantin Asofiei

01:08 PM Support #9709: Needed: Basic example of configuring separate client and server

Am I receiving the below due to Java 17 updates or your updates?... Roger Borrello

12:06 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Please use rev 16336 (9709b) because this cross-site cookie is not permitted with rev 163... Roger Borrello

11:51 AM Support #9709: Needed: Basic example of configuring separate client and server

Please use rev 16336 (9709b) because this cross-site cookie is not permitted with rev 16337 (9709b). I committed rev ... Sergey Ivanovskiy

11:48 AM Support #9709: Needed: Basic example of configuring separate client and server

Roger, you should connect to the server host but not to the broker host. From your description it is @fwddev1:7443/gu... Sergey Ivanovskiy

11:12 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> I have no issues with the broker setup and Java 17. My environment just simulates your en... Roger Borrello

01/02/2026

12:40 PM Support #9709: Needed: Basic example of configuring separate client and server

I rolled back @SameSite@ policy for the authorization cookie rev 16337 (9709b) by setting this property to @STRICT@ a... Sergey Ivanovskiy

12/31/2025

12:14 PM Support #9709: Needed: Basic example of configuring separate client and server

Authentication cookie is used only by @AuthHandler@ and is not used by known implementations of @SsoAuthenticator@. I... Sergey Ivanovskiy

09:45 AM Support #9709: Needed: Basic example of configuring separate client and server

We cannot require reverse proxy as a solution. Greg Shah

12/30/2025

04:56 AM Support #9709: Needed: Basic example of configuring separate client and server

It seems that using Anti-CSRF Tokens should be more easily to implement because this token can be included into html ... Sergey Ivanovskiy

12/29/2025

02:19 PM Support #9709: Needed: Basic example of configuring separate client and server

OK. Thank you for pointing on this issue. I didn't know the Cross-site request forgery (CSRF) method to steal cookies... Sergey Ivanovskiy

02:07 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek, is this rev 16336 (9709b) passed the review if we don't take into account the secu... Hynek Cihlar

02:03 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > Sergey Ivanovskiy wrote:
> > > Hynek, could you please explain ... Hynek Cihlar

02:02 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Why these issues were not raised when iframe with cookie were developed at the different ... Sergey Ivanovskiy

01:57 PM Support #9709: Needed: Basic example of configuring separate client and server

Why these issues were not raised when iframe with cookie were developed at the different task more earlier? The same ... Sergey Ivanovskiy

01:37 PM Support #9709: Needed: Basic example of configuring separate client and server

I don't understand why this option (ref https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/Cookies)... Sergey Ivanovskiy

01:33 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek, could you please explain or develop your idea more thorou... Sergey Ivanovskiy

01:27 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, is this rev 16336 (9709b) passed the review if we don't take into account the security issues?
I would propos... Sergey Ivanovskiy

12:49 PM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> Hynek, could you please explain or develop your idea more thoroughly because it is not cl... Hynek Cihlar

12:02 PM Support #9709: Needed: Basic example of configuring separate client and server

Hynek, could you please explain or develop your idea more thoroughly because it is not clear for me now. The spawned ... Sergey Ivanovskiy

11:49 AM Support #9709: Needed: Basic example of configuring separate client and server

Sergey Ivanovskiy wrote:
> It seems that NONE is only option. In practice I did some tests that showed that another ... Hynek Cihlar

10:50 AM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Code review 9709b.
>
> Potential @NPE@, @env.get(BrokerCore.BROKER_DEDICATED_HOST)@ may in ... Sergey Ivanovskiy

08:50 AM Support #9709: Needed: Basic example of configuring separate client and server

Hynek Cihlar wrote:
> Code review 9709b.
> I'm a bit uneasy with relaxing the same-site cookie policy in @AuthHan... Sergey Ivanovskiy

07:53 AM Support #9709: Needed: Basic example of configuring separate client and server

Code review 9709b.
Potential @NPE@, @env.get(BrokerCore.BROKER_DEDICATED_HOST)@ may in theory return @null@. For s... Hynek Cihlar