Project

General

Profile

Activity

From 01/20/2026 to 02/18/2026

02/19/2026

10:52 PM Support #9709: Needed: Basic example of configuring separate client and server
Added 2 tools to the @deploy/server@ directory of Hotel GUI:
* @prepare_compose.sh@
* @prepare_swarm.sh@
These b... Roger Borrello

02/18/2026

03:30 PM Support #9709: Needed: Basic example of configuring separate client and server
OK. @SSLCertUtils@ has an option to load external certificate to be used instead of self-signed root certificate. Hav... Sergey Ivanovskiy
03:29 PM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > >I'm using 9709b_16459 and the ports are all exposed. I saw th... Greg Shah
02:36 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> I do not understand what do you mean by @It seems they have to be exposed both on the ser... Roger Borrello
02:24 PM Support #9709: Needed: Basic example of configuring separate client and server
I do not understand what do you mean by @It seems they have to be exposed both on the server and the broker. Now we a... Sergey Ivanovskiy
02:20 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> >I'm using 9709b_16459 and the ports are all exposed. I saw that you can add them in the ... Roger Borrello
02:13 PM Support #9709: Needed: Basic example of configuring separate client and server
Thus I should use valid certificates with the web client but not self-signed and should come back to the first way. Sergey Ivanovskiy
02:06 PM Support #9709: Needed: Basic example of configuring separate client and server
That is zugzwang. Sergey Ivanovskiy
02:03 PM Support #9709: Needed: Basic example of configuring separate client and server
Greg, I missed in my consideration the embedded web client case that makes changes because the embedded web client is... Sergey Ivanovskiy
01:56 PM Support #9709: Needed: Basic example of configuring separate client and server
I should notify that for the embedded web client we have the same issue because the web client is embedded into ifram... Sergey Ivanovskiy
11:17 AM Support #9709: Needed: Basic example of configuring separate client and server
We can use the distributed @localStorage@ between different origins without synchronizations. Sergey Ivanovskiy
11:12 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> Sergey Ivanovskiy wrote:
> > @BroadcastChannels@ are used to *The Broadcast Channel API allows b... Sergey Ivanovskiy
10:18 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> Roger Borrello wrote:
> > Greg Shah wrote:
> > > In regard to the issues you posted in #9709-53... Roger Borrello
10:10 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Greg Shah wrote:
> > In regard to the issues you posted in #9709-532, I understand that the... Greg Shah
09:48 AM Support #9709: Needed: Basic example of configuring separate client and server
OK.
I created 9709d for changes to do separate pages for login, web client page and logout page. The existing fun... Sergey Ivanovskiy
09:39 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> This should be the certificate issue, you should copy the link and open this link in a ne... Roger Borrello
09:15 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> In regard to the issues you posted in #9709-532, I understand that these same issues are not pres... Roger Borrello
08:59 AM Support #9709: Needed: Basic example of configuring separate client and server
In regard to the issues you posted in #9709-532, I understand that these same issues are not present in the "all-in-o... Greg Shah
08:42 AM Support #9709: Needed: Basic example of configuring separate client and server
Yes, it should be used to manage opened pages in the browser but I just found this code... Sergey Ivanovskiy
08:27 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> @BroadcastChannels@ are used to *The Broadcast Channel API allows basic communication bet... Greg Shah
08:14 AM Support #9709: Needed: Basic example of configuring separate client and server
@BroadcastChannels@ are used to *The Broadcast Channel API allows basic communication between browsing contexts (that... Sergey Ivanovskiy
07:33 AM Support #9709: Needed: Basic example of configuring separate client and server
If I understand correctly, then ACME client was removed from FWD project because Let's Encrypt certificates are not u... Sergey Ivanovskiy
03:59 AM Support #9709: Needed: Basic example of configuring separate client and server
There are several template pages:... Sergey Ivanovskiy
03:34 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> The one page portal is frontend part that can be implemented as separate pages. Is my vie... Constantin Asofiei
02:48 AM Support #9709: Needed: Basic example of configuring separate client and server
The one page portal is frontend part that can be implemented as separate pages. Is my view correct? What did I miss h... Sergey Ivanovskiy
02:43 AM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> I mean the parts where we redirect to logout page, auto-login and so on. Also the 'open... Sergey Ivanovskiy
02:28 AM Support #9709: Needed: Basic example of configuring separate client and server
I mean the parts where we redirect to logout page, auto-login and so on. Also the 'open related session' may be depe... Constantin Asofiei
02:23 AM Support #9709: Needed: Basic example of configuring separate client and server
Did you mean this one?
> managed to remove CORS. Changes in supported http methods and js.
I do not think that SSO ... Sergey Ivanovskiy
02:19 AM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Sergey Ivanovskiy wrote:
> > > My note is that one page d... Constantin Asofiei
02:16 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Sergey Ivanovskiy wrote:
> > My note is that one page design added this issue for the br... Constantin Asofiei
01:18 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, I just observed your note:
>So it might have something to do with trying to have 2 brokers on the same IP add... Sergey Ivanovskiy
12:59 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Sergey Ivanovskiy wrote:
> > I would like to discuss an issue we are facing. The Java we... Sergey Ivanovskiy
10:59 PM Support #9709: Needed: Basic example of configuring separate client and server
>I'm using 9709b_16459 and the ports are all exposed. I saw that you can add them in the configuration (they don't su... Sergey Ivanovskiy
10:38 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> My note is that one page design added this issue for the broker clients setup because in ... Sergey Ivanovskiy
10:33 PM Support #9709: Needed: Basic example of configuring separate client and server
This should be the certificate issue, you should copy the link and open this link in a new tab. Sergey Ivanovskiy
10:28 PM Support #9709: Needed: Basic example of configuring separate client and server
I removed one broker from the swarm configuration to simplify things. The same issue comes up. I went in to developer... Roger Borrello
08:04 PM Support #9709: Needed: Basic example of configuring separate client and server
I was sorely disappointed when I moved the "all-in-one" configuration to 3 VMs. I moved the DB to *fwddev1*, the serv... Roger Borrello

02/17/2026

01:13 PM Support #9709: Needed: Basic example of configuring separate client and server
My note is that one page design added this issue for the broker clients setup because in this case the main page beco... Sergey Ivanovskiy
12:42 PM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> Sorry, I need to slow this down a bit to make sure we all have a shared understanding.
>
> > T... Sergey Ivanovskiy
09:18 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > The current rev 9709b is 16458. Did you use this version?
> I... Roger Borrello
08:22 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Roger. should these certificates store be in the repository? Should I use these committed... Roger Borrello
08:17 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> The current rev 9709b is 16458. Did you use this version?
I am updating now.
 Roger Borrello
08:09 AM Support #9709: Needed: Basic example of configuring separate client and server
We must be able to run the clients on a different IP than the server. That is a hard requirement. Greg Shah
08:00 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> > *Greg* - at this time I think we are trying to solve something which is not and can not be a re... Constantin Asofiei
07:54 AM Support #9709: Needed: Basic example of configuring separate client and server
Sorry, I need to slow this down a bit to make sure we all have a shared understanding.
> The Java web client start... Greg Shah
06:50 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, you can try this version committed rev. 16459 (9709b) for testing. Sergey Ivanovskiy
03:20 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger. should these certificates store be in the repository? Should I use these committed stores? I guess that it sho... Sergey Ivanovskiy
02:50 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> The main automation of configuration of the directory and broker configurations has been che... Sergey Ivanovskiy
11:47 PM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> Constantin Asofiei wrote:
> > (the above can also be limited to only the cases when the... Sergey Ivanovskiy
11:33 PM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey, with *9709b_16442* I am receiving:
> !9709_npe.png!
> after I authorize the broker... Sergey Ivanovskiy
07:02 PM Support #9709: Needed: Basic example of configuring separate client and server
The main automation of configuration of the directory and broker configurations has been checked into the Hotel GUI p... Roger Borrello

02/16/2026

05:38 PM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> (the above can also be limited to only the cases when the FWD server and FWD client are ... Constantin Asofiei
05:15 PM Support #9709: Needed: Basic example of configuring separate client and server
(the above can also be limited to only the cases when the FWD server and FWD client are on different domains - I don'... Constantin Asofiei
05:14 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> At this moment I have no complete picture of how these ideas should work. These ideas lea... Constantin Asofiei
05:00 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, with *9709b_16442* I am receiving:
!9709_npe.png!
after I authorize the broker link.
The broker console ... Roger Borrello
04:31 PM Support #9709: Needed: Basic example of configuring separate client and server
At this moment I have no complete picture of how these ideas should work. These ideas lead to very complicated design... Sergey Ivanovskiy
04:22 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, Hynek, thanks for your patience. So only the top-level 'navigation' page can set cookies, the iframes will n... Constantin Asofiei
03:56 PM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> I don't see how the cross-site response is involved when all links calling into the FWD ... Hynek Cihlar
03:27 PM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Constantin Asofiei wrote:
> > > Sergey, is this problem b... Sergey Ivanovskiy
03:16 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Sergey, is this problem because we no longer store this to... Constantin Asofiei
03:13 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> I would like to discuss an issue we are facing. The Java web client starts an authenticat... Sergey Ivanovskiy
03:11 PM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> Sergey, is this problem because we no longer store this token in a cookie? Or something ... Sergey Ivanovskiy
03:04 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, is this problem because we no longer store this token in a cookie? Or something else?
If the cookie is the... Constantin Asofiei
02:49 PM Support #9709: Needed: Basic example of configuring separate client and server
I would like to discuss an issue we are facing. The Java web client starts an authentication service that provides we... Sergey Ivanovskiy

02/12/2026

02:24 PM Support #9709: Needed: Basic example of configuring separate client and server
I have some conceptual difficulties in how to work with DHTML documents. The root document can contain only a script ... Sergey Ivanovskiy

02/09/2026

09:06 AM Support #9709: Needed: Basic example of configuring separate client and server
This committed revision 16435 (9709b) is not for the review, I just fixed previous security issues related to the cli... Sergey Ivanovskiy

02/03/2026

05:37 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, looks good. You can post a diff or commit for early review. Hynek Cihlar
05:00 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> @sessionIdClientPairs@ holds P2J security sessions, not the http sessions. You get the HttpSes... Sergey Ivanovskiy
04:34 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> @sessionIdClientPairs@ holds P2J security sessions, not the http sessions. You get the HttpSes... Sergey Ivanovskiy
04:32 AM Support #9709: Needed: Basic example of configuring separate client and server
@sessionIdClientPairs@ holds P2J security sessions, not the http sessions. You get the HttpSession from the request o... Hynek Cihlar
04:21 AM Support #9709: Needed: Basic example of configuring separate client and server
I confused because the code of @WebDriverHander@ uses ... Sergey Ivanovskiy
04:09 AM Support #9709: Needed: Basic example of configuring separate client and server
I observed that if one browser policy is enabled, then the client sessions (@InitTermListener@) are tracked by @WebSe... Sergey Ivanovskiy
04:04 AM Support #9709: Needed: Basic example of configuring separate client and server
Thank you, could I use http sessions listener to track http sessions by their ids and access them from the code? Sergey Ivanovskiy
03:31 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> In @AuthFilter@ @HttpSession.this.getId()@ is used for @SecuritySession@. This id must be... Hynek Cihlar
02:50 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey, for the token refresh you will need some kind of request handler that will handle the ... Sergey Ivanovskiy

01/30/2026

05:35 PM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> Sergey/Hynek: I understand that this will be executed on the FWD server, but from what t... Hynek Cihlar
05:25 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey/Hynek: I understand that this will be executed on the FWD server, but from what thread? If you switch the con... Constantin Asofiei
02:33 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, for the token refresh you will need some kind of request handler that will handle the token refresh request f... Hynek Cihlar
12:36 PM Support #9709: Needed: Basic example of configuring separate client and server
@WebDriverHandler.CLIENT_UUID_RELATED_SESSION_ID_PAIRS@ is also available. Sergey Ivanovskiy
12:08 PM Support #9709: Needed: Basic example of configuring separate client and server
I can have only the spawner id, @WebDriverHandler.handleStartClientRequest@ if @WebDriverHandler.spawnWorker@ was suc... Sergey Ivanovskiy
11:57 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek, could you help with FWD API to call the client api from the server side on behalf ... Hynek Cihlar
11:06 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek, could you help with FWD API to call the client api from the server side on behalf of the authenticated user th... Sergey Ivanovskiy
08:51 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Roger Borrello wrote:
> > Sergey Ivanovskiy wrote:
> > > #9709-460 looks like a configurat... Greg Shah
07:02 AM Support #9709: Needed: Basic example of configuring separate client and server
The only working schema can be that the web server that handled the login page creates authentication cookie on respo... Sergey Ivanovskiy
04:20 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > I would like to detail this part because the secure cookie was n... Sergey Ivanovskiy

01/29/2026

04:28 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> I would like to detail this part because the secure cookie was not set for the main ifram... Hynek Cihlar
04:10 PM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > #9709-460 looks like a configuration issue because client conn... Roger Borrello
03:20 PM Support #9709: Needed: Basic example of configuring separate client and server
9709b just rebased up to rev 16397. Sergey Ivanovskiy
03:16 PM Support #9709: Needed: Basic example of configuring separate client and server
I would like to detail this part because the secure cookie was not set for the main iframe page for the reasons speci... Sergey Ivanovskiy
02:26 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > The idea is the main (root) frame/page should refresh the token ... Hynek Cihlar
01:56 PM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek, you proposed to create session short-lived authentication... Sergey Ivanovskiy
01:53 PM Support #9709 (WIP): Needed: Basic example of configuring separate client and server
Branch @9709c@ was merged into trunk as rev. 16370 and archived. Changed status to WIP to complete the task. Sergey Ivanovskiy
01:11 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek, you proposed to create session short-lived authentication/access web tokens that s... Hynek Cihlar
01:04 PM Support #9709: Needed: Basic example of configuring separate client and server
OK. Preparing 9709c to merge.
9709 web token design to go farther
Hynek, you proposed to create session short... Sergey Ivanovskiy
12:59 PM Support #9709 (Merge Pending): Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Could 9709c be merged into the trunk? It passed tests and change... Hynek Cihlar
12:46 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> #9709-460 looks like a configuration issue because client connection is refused.
It is... Roger Borrello
12:33 PM Support #9709: Needed: Basic example of configuring separate client and server
You could compare directory.xml of hotel_gui and cact if this is possible and check the bootstrap client configuratio... Sergey Ivanovskiy
12:27 PM Support #9709: Needed: Basic example of configuring separate client and server
#9709-460 looks like a configuration issue because client connection is refused. Sergey Ivanovskiy
12:24 PM Support #9709: Needed: Basic example of configuring separate client and server
Fixed erroneous code in rev 16372(9709c) and rev 16380(9709b). Sergey Ivanovskiy
12:09 PM Support #9709: Needed: Basic example of configuring separate client and server
I found that the target code probably should be ... Sergey Ivanovskiy
11:01 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> You could run java program to test host name.
Excellent... now I'm confused more. The ... Roger Borrello
09:50 AM Support #9709: Needed: Basic example of configuring separate client and server
I did not test @9709b_16379@ with @cact@ because no local setup at this moment but tested with the different large ap... Sergey Ivanovskiy
08:58 AM Support #9709: Needed: Basic example of configuring separate client and server
Thanks for the clues, Sergey. One of the difficulties is the Docker image is very thin and without even the simplest ... Roger Borrello
07:10 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, did you try to configure @/etc/hosts@ file for each container?... Sergey Ivanovskiy
05:31 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, what is the FWD version for your test environment? 9709b?
Are these instructions #9709-362 valid for hotel_gu... Sergey Ivanovskiy
05:19 AM Support #9709: Needed: Basic example of configuring separate client and server
Your network configuration resolves your host name as loop back address or fails to resolve this host name... Sergey Ivanovskiy
05:10 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, this should be the network configuration issue. This exception ... Sergey Ivanovskiy

01/28/2026

06:55 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, my customer's configuration is almost exactly the same as the hotel configuration, which is working. But the ... Roger Borrello
11:42 AM Support #9709: Needed: Basic example of configuring separate client and server
Good plan. Greg Shah
11:35 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Working on 9709b but it makes sense to merge 9709c first because Nginx gives the solid so... Hynek Cihlar
11:34 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Could 9709c be merged into the trunk? It passed tests and changes are safe.
Trunk is c... Hynek Cihlar
11:31 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek, the js web client loads modules @p2j.js@, @p2j.screen.js@ and so on. Should these ... Hynek Cihlar
11:28 AM Support #9709: Needed: Basic example of configuring separate client and server
Working on 9709b but it makes sense to merge 9709c first because Nginx gives the solid solution to this task (#9709-4... Sergey Ivanovskiy
11:01 AM Support #9709: Needed: Basic example of configuring separate client and server
Could 9709c be merged into the trunk? It passed tests and changes are safe. Sergey Ivanovskiy
10:24 AM Support #9709: Needed: Basic example of configuring separate client and server
Nginx has the simple configuration that is due to the customer developed this config. The new broker host ip address ... Sergey Ivanovskiy
10:00 AM Support #9709: Needed: Basic example of configuring separate client and server
I updated #9709-449 to show environment settings. Sergey Ivanovskiy
09:55 AM Support #9709: Needed: Basic example of configuring separate client and server
9709c passed tests with nginx proxy server. Could this 9709c rev 16371 be merged into the trunk?
 Sergey Ivanovskiy
08:18 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek, the js web client loads modules @p2j.js@, @p2j.screen.js@ and so on. Should these modules be all private and c... Sergey Ivanovskiy
06:49 AM Support #9709: Needed: Basic example of configuring separate client and server
For testing 9709c I need to use the web reverse proxy server. These settings for nginx used for the local setup of th... Sergey Ivanovskiy
06:26 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> @((WebClientBuilder) clientBuilder).getParams()@ returns @WebClientBuilderParameters@, bu... Hynek Cihlar
06:25 AM Support #9709: Needed: Basic example of configuring separate client and server
@((WebClientBuilder) clientBuilder).getParams()@ returns @WebClientBuilderParameters@, but @clientBuilder.getParams()... Sergey Ivanovskiy
04:49 AM Support #9709 (Internal Test): Needed: Basic example of configuring separate client and server
Code review 9709c.
The changes look fine. Just two minor points.
The cast @(WebClientBuilder) clientBuilder)@ i... Hynek Cihlar
04:21 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Created 9709c rev 16369. Please review these code again. I would like to merge this branc... Hynek Cihlar
03:34 AM Support #9709: Needed: Basic example of configuring separate client and server
Created 9709c rev 16369. Please review these code again. I would like to merge this branch into the trunk. Sergey Ivanovskiy
02:37 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> This patch 9709c.patch can be merged because it was passed the review. The secure cookie ... Sergey Ivanovskiy
02:32 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > This was just an example. The malicious code could replace any o... Hynek Cihlar
02:30 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > You found that the current code uses the public function that ca... Sergey Ivanovskiy
02:26 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> You found that the current code uses the public function that can be fixed. XSS is not an... Hynek Cihlar
02:23 AM Support #9709: Needed: Basic example of configuring separate client and server
This path can be merged because it was passed the review. The secure cookie is STRICT and AuthHandler not changed. Sergey Ivanovskiy
02:08 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg, I would like to split 9709b to 9709c that was reviewed up to rev. 16361 (9709b) and merge this version into the... Sergey Ivanovskiy
02:04 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > What should be patched? The web socket object is also private.
... Sergey Ivanovskiy

01/27/2026

01:13 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> What should be patched? The web socket object is also private.
See the example:
<pre... Hynek Cihlar
12:58 PM Support #9709: Needed: Basic example of configuring separate client and server
I think that XSS attacks cannot reach the target aim to steal the secret key in 9709b case. Sergey Ivanovskiy
12:56 PM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek Cihlar wrote:
> > > To make the process more secure it is... Sergey Ivanovskiy
12:54 PM Support #9709: Needed: Basic example of configuring separate client and server
An important point, the CSP measures should be configurable. They could prevent Lyra from extending the site DOM and ... Hynek Cihlar
12:50 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Please specify the security requirements that should be satisfied to implement one-time w... Hynek Cihlar
12:32 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Greg, Hynek, please note that the security requirements that you are considering are not ... Hynek Cihlar
12:30 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > To make the process more secure it is important to implement som... Hynek Cihlar
12:18 PM Support #9709: Needed: Basic example of configuring separate client and server
Please specify the security requirements that should be satisfied to implement one-time web tokens and please explain... Sergey Ivanovskiy
12:09 PM Support #9709: Needed: Basic example of configuring separate client and server
Greg, Hynek, please note that the security requirements that you are considering are not satisfied by the trunk!
If ... Sergey Ivanovskiy
12:04 PM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> To make the process more secure it is important to implement some measures to prevent a potent... Sergey Ivanovskiy
11:46 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> This value is not persistent in the directory. It is a temporary value delivered to the j... Hynek Cihlar
11:35 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> OK, then please provide a detailed description of your changes and why they are safe and secure.
... Sergey Ivanovskiy
11:16 AM Support #9709: Needed: Basic example of configuring separate client and server
This value is not persistent in the directory. It is a temporary value delivered to the java web client by WebClientS... Sergey Ivanovskiy
11:07 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Greg, I do not understand why you and Hynek decided that I implemented the described by t... Hynek Cihlar
10:40 AM Support #9709: Needed: Basic example of configuring separate client and server
OK, then please provide a detailed description of your changes and why they are safe and secure. Greg Shah
10:32 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> > When the JS client is initialized, it received an unencrypted decryption key from Java client t... Sergey Ivanovskiy
10:13 AM Support #9709: Needed: Basic example of configuring separate client and server
> When the JS client is initialized, it received an unencrypted decryption key from Java client to decrypt the api to... Greg Shah
09:53 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > I still do not understand why we should use @postMessage@, the w... Sergey Ivanovskiy
09:52 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> > Static resources (img, css, js) would either be public (they are public anyway), or fet... Hynek Cihlar
09:31 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> I still do not understand why we should use @postMessage@, the web tokens can be generate... Hynek Cihlar
09:25 AM Support #9709: Needed: Basic example of configuring separate client and server
> Static resources (img, css, js) would either be public (they are public anyway), or fetched via authenticated XHR/f... Sergey Ivanovskiy
09:22 AM Support #9709: Needed: Basic example of configuring separate client and server
Yes, 9709b rev 16379 and the latest rebase trunk rev 16353. Sergey Ivanovskiy
09:11 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Roger Borrello wrote:
> > Sergey, am I able to test with the very latest revision of 970... Roger Borrello
08:58 AM Support #9709: Needed: Basic example of configuring separate client and server
I still do not understand why we should use @postMessage@, the web tokens can be generated as it is implemented in @9... Sergey Ivanovskiy
08:33 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Please revisit #9709-289.
Yes, thanks. This is the @SameSite@ policy on the cookie in ... Hynek Cihlar
07:48 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > The only web authentication method that is available for the cus... Sergey Ivanovskiy
07:47 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek Cihlar wrote:
> > > Code review 9709b.
> > >
> > > I h... Sergey Ivanovskiy
07:44 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> The only web authentication method that is available for the customer that uses the dynam... Hynek Cihlar
07:40 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > Code review 9709b.
> >
> > I have some comments to address in... Hynek Cihlar
06:48 AM Support #9709: Needed: Basic example of configuring separate client and server
The only web authentication method that is available for the customer that uses the dynamic web pages is the secure c... Sergey Ivanovskiy
06:07 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Code review 9709b.
>
> I have some comments to address in the changes, but my biggest conce... Sergey Ivanovskiy
05:50 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek Cihlar wrote:
> Code review 9709b.
>
> I have some comments to address in the changes, but my biggest conce... Sergey Ivanovskiy
04:53 AM Support #9709: Needed: Basic example of configuring separate client and server
Code review 9709b.
I have some comments to address in the changes, but my biggest concern is the api token managem... Hynek Cihlar
04:14 AM Support #9709: Needed: Basic example of configuring separate client and server
I have not fixed yet the test keyboard handler and not tested upload files handler. Thus in these parts can be changes. Sergey Ivanovskiy
03:48 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey, am I able to test with the very latest revision of 9709b? Or do I need to stay with ... Sergey Ivanovskiy

01/26/2026

05:57 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, am I able to test with the very latest revision of 9709b? Or do I need to stay with 16336?
Greg, I have a... Roger Borrello
02:51 PM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> > No port mapping, no NAT, and each container has its own IP and DNS identity. This is what you a... Roger Borrello
02:20 PM Support #9709: Needed: Basic example of configuring separate client and server
Committed rev 16378 (9709b) fixed and tested @MSG_ALLOCATE_NEW_WEB_TOKEN@. Sergey Ivanovskiy
10:46 AM Support #9709: Needed: Basic example of configuring separate client and server
> No port mapping, no NAT, and each container has its own IP and DNS identity. This is what you are talking about, co... Greg Shah
08:35 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> To be clear: these are the things that must be visible externally:
>
> * FWD server's IP addre... Roger Borrello
05:16 AM Support #9709: Needed: Basic example of configuring separate client and server
Committed rev 16375 (9709b). This is what is possible to do with the current cross-site web client page and dynamic h... Sergey Ivanovskiy

01/23/2026

11:17 AM Support #9709: Needed: Basic example of configuring separate client and server
I also tried to set response headers like these Access-Control-Allow-Credentials and Access-Control-Allow-Origin with... Sergey Ivanovskiy
09:35 AM Support #9709 (Review): Needed: Basic example of configuring separate client and server
Greg Shah
09:30 AM Support #9709: Needed: Basic example of configuring separate client and server
@localStorage@ and @sessionStorage@ with the authentication header is not recommended approach but using secret key w... Sergey Ivanovskiy
09:20 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg, could 9709b be reviewed at this stage because during the review these problems could be solved. Sergey Ivanovskiy
09:12 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> What do we need to do to finish this work and help get this into trunk sometime next week?
It ne... Sergey Ivanovskiy
09:03 AM Support #9709: Needed: Basic example of configuring separate client and server
What do we need to do to finish this work and help get this into trunk sometime next week? Greg Shah
08:10 AM Support #9709: Needed: Basic example of configuring separate client and server
Committed revision 16374(9709b) improved the web token validation logic in order to generate web token on the java we... Sergey Ivanovskiy
07:44 AM Support #9709: Needed: Basic example of configuring separate client and server
To be clear: these are the things that must be visible externally:
* FWD server's IP address and Jetty port
* FWD... Greg Shah
07:41 AM Support #9709: Needed: Basic example of configuring separate client and server
As stated previously, we must not base our networking on the concept that the containers will be accessible from the ... Greg Shah
04:04 AM Support #9709: Needed: Basic example of configuring separate client and server
> The server is visible to the broker (at least the first one) via port 3333 when I use the host name, even when runn... Sergey Ivanovskiy

01/22/2026

05:25 PM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> In production, orchestration tools like Kubernetes will be used in preference to Docker Compose. ... Roger Borrello
05:22 PM Support #9709: Needed: Basic example of configuring separate client and server
This committed revision 16373 (9709b) was tested with one of the customers large application, found issues related to... Sergey Ivanovskiy
11:58 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Why it cannot use the main web server certificate?
It will work, but we will need to doc... Constantin Asofiei
11:53 AM Support #9709: Needed: Basic example of configuring separate client and server
Why it cannot use the main web server certificate? Sergey Ivanovskiy
11:51 AM Support #9709: Needed: Basic example of configuring separate client and server
Something else to consider: if the iframe is served directly by the broker host, then each broker will require its ow... Constantin Asofiei
10:56 AM Support #9709: Needed: Basic example of configuring separate client and server
@bash@ please. Greg Shah
10:54 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg Shah wrote:
> > Prepare the directory
> >
> > [...]
>
> Do we really need to use compose to prepare the di... Roger Borrello
10:35 AM Support #9709: Needed: Basic example of configuring separate client and server
Constantin: I agree that reverse proxy will be commonly used and often chosen. But I don't want to require reverse p... Greg Shah
10:33 AM Support #9709: Needed: Basic example of configuring separate client and server
> Prepare the directory
>
> ... Greg Shah
10:32 AM Support #9709: Needed: Basic example of configuring separate client and server
> > Why do you use https://localhost:7443/? You should use the server address and please check these conditions, all ... Greg Shah
10:19 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> I will check this later. The only idea is to use dedicatedMode = true. It should generate... Roger Borrello
09:50 AM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Constantin, #9709-277 the second option can be used.
> I ... Sergey Ivanovskiy
09:38 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Constantin, #9709-277 the second option can be used.
I understand, but this is not just ... Constantin Asofiei
09:35 AM Support #9709: Needed: Basic example of configuring separate client and server
Constantin, #9709-277 the second option can be used. Sergey Ivanovskiy
09:18 AM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, please create a diagram how the infrastructure will look when deploying FWD with brokers.
Greg: I understa... Constantin Asofiei
09:10 AM Support #9709: Needed: Basic example of configuring separate client and server
Constantin Asofiei wrote:
> From #10809-50:
> Sergey Ivanovskiy wrote:
> > Do you have ideas how to overcome usage... Sergey Ivanovskiy
09:00 AM Support #9709: Needed: Basic example of configuring separate client and server
From #10809-50:
Sergey Ivanovskiy wrote:
> Do you have ideas how to overcome usages of LAX cookies with cross-site ... Constantin Asofiei
05:17 AM Support #9709 (WIP): Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy
03:35 AM Support #9709: Needed: Basic example of configuring separate client and server
Greg, Hynek, from the Single_Sign_On documentation ... Sergey Ivanovskiy
02:14 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey, revision 421 of Hotel GUI allows you to configure the docker compose very easily. Th... Sergey Ivanovskiy
02:09 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, I have no idea, the accessibility conditions should be satisfied #9709-358 in order that the broker configurat... Sergey Ivanovskiy

01/21/2026

06:45 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, revision 421 of Hotel GUI allows you to configure the docker compose very easily. The steps would be:
* Conv... Roger Borrello
04:28 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Why do you use https://localhost:7443/? You should use the server address and please chec... Roger Borrello
12:35 PM Support #9709: Needed: Basic example of configuring separate client and server
Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > Roger, I am not aware of your environment and the correspondin... Sergey Ivanovskiy
12:18 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Roger, I am not aware of your environment and the corresponding setup but there are the f... Roger Borrello
03:41 AM Support #9709: Needed: Basic example of configuring separate client and server
Roger, I am not aware of your environment and the corresponding setup but there are the following conditions that sho... Sergey Ivanovskiy
07:37 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey, in my docker compose configuration, I have 3 containers, the DB (hostname=hoteldb), the server (hostname=hote... Roger Borrello

01/20/2026

12:08 PM Support #9709: Needed: Basic example of configuring separate client and server
Sergey Ivanovskiy wrote:
> Hynek, could you help with spreadsheet testcase sample? I need to test how the spreadshee... Hynek Cihlar
08:45 AM Support #9709: Needed: Basic example of configuring separate client and server
Hynek, could you help with spreadsheet testcase sample? I need to test how the spreadsheet resources are loaded with ... Sergey Ivanovskiy
 

Also available in: Atom