Activity
From 01/22/2026 to 02/20/2026
02/20/2026
- 02:28 PM Support #9709: Needed: Basic example of configuring separate client and server
- I found at least a copy/paste in fine logs:...
- 02:06 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I should report new issue with the trunk rev 16435 related to *New Session* functionality... - 12:29 PM Support #9709: Needed: Basic example of configuring separate client and server
- Thank you, I will use this library but I would like to make some adjustment to plans. I know that the customer would ...
- 12:18 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Can I use the following library https://github.com/jwtk/jjwt?#gradle?
Greg mentioned in ... - 12:16 PM Support #9709: Needed: Basic example of configuring separate client and server
- Debugging the issue but the spawn processes are failed without visible logs. The server logs just shows the several t...
- 12:04 PM Support #9709: Needed: Basic example of configuring separate client and server
- Updating #9709-611: it is a localhost setup without brokers that means that all web clients are spawned locally.
- 12:01 PM Support #9709: Needed: Basic example of configuring separate client and server
- I should report new issue with the trunk rev 16435 related to *New Session* functionality.
Steps to reproduce :
#... - 07:05 AM Support #9709 (WIP): Needed: Basic example of configuring separate client and server
- Can I use the following library https://github.com/jwtk/jjwt?#gradle?
02/19/2026
- 11:01 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Constantin Asofiei wrote:
> > *Roger* - in what repository do we have dbash.sh ? Because no... - 10:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> *Roger* - in what repository do we have dbash.sh ? Because now all ports are open, and y... - 10:26 AM Support #9709: Needed: Basic example of configuring separate client and server
- *Roger* - in what repository do we have dbash.sh ? Because now all ports are open, and you can have only one single c...
- 10:16 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Hynek Cihlar wrote:
> > Greg Shah wrote:
> > > Why do the documents loaded into those iframes r... - 10:12 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Greg Shah wrote:
> > Why do the documents loaded into those iframes require our session cooki... - 10:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> *Roger* - the directory.xml in Hotel GUI must not include the broker ACLs by default; an... - 10:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> As Sergey mentioned, we need to intercept all these requests to FWD client and attach to... - 10:06 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Why do the documents loaded into those iframes require our session cookie?
Html browser widget... - 10:03 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Why do the documents loaded into those iframes require our session cookie?
Any request to i.e. d... - 09:55 AM Support #9709: Needed: Basic example of configuring separate client and server
- *Roger* - the directory.xml in Hotel GUI must not include the broker ACLs by default; any scripts/etc which add a bro...
- 09:54 AM Support #9709: Needed: Basic example of configuring separate client and server
- Why do the documents loaded into those iframes require our session cookie?
- 09:42 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Why does an iframe for something like the HTML browser widget need to know about the top level or... - 09:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Hynek Cihlar wrote:
> > Combined with HTTPS this should be close to a session cookie in terms... - 09:30 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Combined with HTTPS this should be close to a session cookie in terms of security.
I take t... - 09:26 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > Sergey Ivanovskiy wrote:
> > > In this case there is an open qu... - 09:20 AM Support #9709: Needed: Basic example of configuring separate client and server
- Why does an iframe for something like the HTML browser widget need to know about the top level origin? I can see tha...
- 09:15 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > In this case there is an open question how to authenticate reque... - 08:59 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> In this case there is an open question how to authenticate requests from DHTML documents.... - 08:18 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Greg Shah wrote:
> > > For example, to complete 9709b I need to use service workers that... - 06:53 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> > For example, to complete 9709b I need to use service workers that cannot work with self-signed ... - 06:52 AM Support #9709: Needed: Basic example of configuring separate client and server
- Thank you for this document, although it does not consider the html browse widget and another driver widgets. It is n...
- 06:51 AM Support #9709: Needed: Basic example of configuring separate client and server
- > For example, to complete 9709b I need to use service workers that cannot work with self-signed certificates. This i...
- 06:25 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> (can be visualized with many compatible tools out there).
I recommend @bierner.markdown-mer... - 06:19 AM Support #9709: Needed: Basic example of configuring separate client and server
- I'm attaching a document describing the potential Cross-Domain spawning solution. It uses a subset of OIDC technologi...
- 05:20 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> This is true, but authenticating the client is the easiest case. Partition cookies would still... - 05:16 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Hynek Cihlar wrote:
> > If our infrastructure rotates the user to a different client no... - 04:48 AM Support #9709: Needed: Basic example of configuring separate client and server
- In 9709d working on new session scenario because I only committed changes for the direct web client SSO spawn. The ot...
- 04:30 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> If our infrastructure rotates the user to a different client node or IP address, the browser l... - 04:12 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Hynek Cihlar wrote:
> > OIDC allows you to move the authentication state out of the cookie an... - 04:07 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I see from the code that OIDC client uses the cookie so if the cookie policy will be STRI... - 04:06 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> OIDC allows you to move the authentication state out of the cookie and into a token that FWD c... - 04:02 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Please explain I do not understand why @to authenticate for all ... - 03:54 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Please explain I do not understand why @to authenticate for all the combinations FWD serv... - 03:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin, please review 16434 (9709d) and share your opinions. I think that it is a unique reasonable way to preser...
- 03:43 AM Support #9709: Needed: Basic example of configuring separate client and server
- I also wonder that OIDC implementation uses client side cookie that is not secured object because it is attached to t...
- 03:39 AM Support #9709: Needed: Basic example of configuring separate client and server
- >Partition cookies are stored in partitions. A partition is a combination of top-level site + the embedded site (for ...
- 03:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Coming back to the ground I found that there is another alternat... - 03:30 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Coming back to the ground I found that there is another alternative *CHIPS* (Cookies Havi... - 03:26 AM Support #9709 (Feedback): Needed: Basic example of configuring separate client and server
- 03:26 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek, please review the committed revision 16434 (9709d) for evaluation and comments. It looks that we are safe to u...
- 12:37 AM Support #9709: Needed: Basic example of configuring separate client and server
- Coming back to the ground I found that there is another alternative *CHIPS* (Cookies Having Independent Partitioned S...
- 10:52 PM Support #9709: Needed: Basic example of configuring separate client and server
- Added 2 tools to the @deploy/server@ directory of Hotel GUI:
* @prepare_compose.sh@
* @prepare_swarm.sh@
These b...
02/18/2026
- 03:30 PM Support #9709: Needed: Basic example of configuring separate client and server
- OK. @SSLCertUtils@ has an option to load external certificate to be used instead of self-signed root certificate. Hav...
- 03:29 PM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > >I'm using 9709b_16459 and the ports are all exposed. I saw th... - 02:36 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I do not understand what do you mean by @It seems they have to be exposed both on the ser... - 02:24 PM Support #9709: Needed: Basic example of configuring separate client and server
- I do not understand what do you mean by @It seems they have to be exposed both on the server and the broker. Now we a...
- 02:20 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> >I'm using 9709b_16459 and the ports are all exposed. I saw that you can add them in the ... - 02:13 PM Support #9709: Needed: Basic example of configuring separate client and server
- Thus I should use valid certificates with the web client but not self-signed and should come back to the first way.
- 02:06 PM Support #9709: Needed: Basic example of configuring separate client and server
- That is zugzwang.
- 02:03 PM Support #9709: Needed: Basic example of configuring separate client and server
- Greg, I missed in my consideration the embedded web client case that makes changes because the embedded web client is...
- 01:56 PM Support #9709: Needed: Basic example of configuring separate client and server
- I should notify that for the embedded web client we have the same issue because the web client is embedded into ifram...
- 11:17 AM Support #9709: Needed: Basic example of configuring separate client and server
- We can use the distributed @localStorage@ between different origins without synchronizations.
- 11:12 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Sergey Ivanovskiy wrote:
> > @BroadcastChannels@ are used to *The Broadcast Channel API allows b... - 10:18 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Roger Borrello wrote:
> > Greg Shah wrote:
> > > In regard to the issues you posted in #9709-53... - 10:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Greg Shah wrote:
> > In regard to the issues you posted in #9709-532, I understand that the... - 09:48 AM Support #9709: Needed: Basic example of configuring separate client and server
- OK.
I created 9709d for changes to do separate pages for login, web client page and logout page. The existing fun... - 09:39 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> This should be the certificate issue, you should copy the link and open this link in a ne... - 09:15 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> In regard to the issues you posted in #9709-532, I understand that these same issues are not pres... - 08:59 AM Support #9709: Needed: Basic example of configuring separate client and server
- In regard to the issues you posted in #9709-532, I understand that these same issues are not present in the "all-in-o...
- 08:42 AM Support #9709: Needed: Basic example of configuring separate client and server
- Yes, it should be used to manage opened pages in the browser but I just found this code...
- 08:27 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> @BroadcastChannels@ are used to *The Broadcast Channel API allows basic communication bet... - 08:14 AM Support #9709: Needed: Basic example of configuring separate client and server
- @BroadcastChannels@ are used to *The Broadcast Channel API allows basic communication between browsing contexts (that...
- 07:33 AM Support #9709: Needed: Basic example of configuring separate client and server
- If I understand correctly, then ACME client was removed from FWD project because Let's Encrypt certificates are not u...
- 03:59 AM Support #9709: Needed: Basic example of configuring separate client and server
- There are several template pages:...
- 03:34 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> The one page portal is frontend part that can be implemented as separate pages. Is my vie... - 02:48 AM Support #9709: Needed: Basic example of configuring separate client and server
- The one page portal is frontend part that can be implemented as separate pages. Is my view correct? What did I miss h...
- 02:43 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> I mean the parts where we redirect to logout page, auto-login and so on. Also the 'open... - 02:28 AM Support #9709: Needed: Basic example of configuring separate client and server
- I mean the parts where we redirect to logout page, auto-login and so on. Also the 'open related session' may be depe...
- 02:23 AM Support #9709: Needed: Basic example of configuring separate client and server
- Did you mean this one?
> managed to remove CORS. Changes in supported http methods and js.
I do not think that SSO ... - 02:19 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Sergey Ivanovskiy wrote:
> > > My note is that one page d... - 02:16 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Sergey Ivanovskiy wrote:
> > My note is that one page design added this issue for the br... - 01:18 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger, I just observed your note:
>So it might have something to do with trying to have 2 brokers on the same IP add... - 12:59 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Sergey Ivanovskiy wrote:
> > I would like to discuss an issue we are facing. The Java we... - 10:59 PM Support #9709: Needed: Basic example of configuring separate client and server
- >I'm using 9709b_16459 and the ports are all exposed. I saw that you can add them in the configuration (they don't su...
- 10:38 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> My note is that one page design added this issue for the broker clients setup because in ... - 10:33 PM Support #9709: Needed: Basic example of configuring separate client and server
- This should be the certificate issue, you should copy the link and open this link in a new tab.
- 10:28 PM Support #9709: Needed: Basic example of configuring separate client and server
- I removed one broker from the swarm configuration to simplify things. The same issue comes up. I went in to developer...
- 08:04 PM Support #9709: Needed: Basic example of configuring separate client and server
- I was sorely disappointed when I moved the "all-in-one" configuration to 3 VMs. I moved the DB to *fwddev1*, the serv...
02/17/2026
- 01:13 PM Support #9709: Needed: Basic example of configuring separate client and server
- My note is that one page design added this issue for the broker clients setup because in this case the main page beco...
- 12:42 PM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> Sorry, I need to slow this down a bit to make sure we all have a shared understanding.
>
> > T... - 09:18 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > The current rev 9709b is 16458. Did you use this version?
> I... - 08:22 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Roger. should these certificates store be in the repository? Should I use these committed... - 08:17 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> The current rev 9709b is 16458. Did you use this version?
I am updating now.
- 08:09 AM Support #9709: Needed: Basic example of configuring separate client and server
- We must be able to run the clients on a different IP than the server. That is a hard requirement.
- 08:00 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> > *Greg* - at this time I think we are trying to solve something which is not and can not be a re... - 07:54 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sorry, I need to slow this down a bit to make sure we all have a shared understanding.
> The Java web client start... - 06:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger, you can try this version committed rev. 16459 (9709b) for testing.
- 03:20 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger. should these certificates store be in the repository? Should I use these committed stores? I guess that it sho...
- 02:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> The main automation of configuration of the directory and broker configurations has been che... - 11:47 PM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Constantin Asofiei wrote:
> > (the above can also be limited to only the cases when the... - 11:33 PM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Sergey, with *9709b_16442* I am receiving:
> !9709_npe.png!
> after I authorize the broker... - 07:02 PM Support #9709: Needed: Basic example of configuring separate client and server
- The main automation of configuration of the directory and broker configurations has been checked into the Hotel GUI p...
02/16/2026
- 05:38 PM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> (the above can also be limited to only the cases when the FWD server and FWD client are ... - 05:15 PM Support #9709: Needed: Basic example of configuring separate client and server
- (the above can also be limited to only the cases when the FWD server and FWD client are on different domains - I don'...
- 05:14 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> At this moment I have no complete picture of how these ideas should work. These ideas lea... - 05:00 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, with *9709b_16442* I am receiving:
!9709_npe.png!
after I authorize the broker link.
The broker console ... - 04:31 PM Support #9709: Needed: Basic example of configuring separate client and server
- At this moment I have no complete picture of how these ideas should work. These ideas lead to very complicated design...
- 04:22 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, Hynek, thanks for your patience. So only the top-level 'navigation' page can set cookies, the iframes will n...
- 03:56 PM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> I don't see how the cross-site response is involved when all links calling into the FWD ... - 03:27 PM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Constantin Asofiei wrote:
> > > Sergey, is this problem b... - 03:16 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Constantin Asofiei wrote:
> > Sergey, is this problem because we no longer store this to... - 03:13 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I would like to discuss an issue we are facing. The Java web client starts an authenticat... - 03:11 PM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Sergey, is this problem because we no longer store this token in a cookie? Or something ... - 03:04 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, is this problem because we no longer store this token in a cookie? Or something else?
If the cookie is the... - 02:49 PM Support #9709: Needed: Basic example of configuring separate client and server
- I would like to discuss an issue we are facing. The Java web client starts an authentication service that provides we...
02/12/2026
- 02:24 PM Support #9709: Needed: Basic example of configuring separate client and server
- I have some conceptual difficulties in how to work with DHTML documents. The root document can contain only a script ...
02/09/2026
- 09:06 AM Support #9709: Needed: Basic example of configuring separate client and server
- This committed revision 16435 (9709b) is not for the review, I just fixed previous security issues related to the cli...
02/03/2026
- 05:37 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, looks good. You can post a diff or commit for early review.
- 05:00 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> @sessionIdClientPairs@ holds P2J security sessions, not the http sessions. You get the HttpSes... - 04:34 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> @sessionIdClientPairs@ holds P2J security sessions, not the http sessions. You get the HttpSes... - 04:32 AM Support #9709: Needed: Basic example of configuring separate client and server
- @sessionIdClientPairs@ holds P2J security sessions, not the http sessions. You get the HttpSession from the request o...
- 04:21 AM Support #9709: Needed: Basic example of configuring separate client and server
- I confused because the code of @WebDriverHander@ uses ...
- 04:09 AM Support #9709: Needed: Basic example of configuring separate client and server
- I observed that if one browser policy is enabled, then the client sessions (@InitTermListener@) are tracked by @WebSe...
- 04:04 AM Support #9709: Needed: Basic example of configuring separate client and server
- Thank you, could I use http sessions listener to track http sessions by their ids and access them from the code?
- 03:31 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> In @AuthFilter@ @HttpSession.this.getId()@ is used for @SecuritySession@. This id must be... - 02:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey, for the token refresh you will need some kind of request handler that will handle the ...
01/30/2026
- 05:35 PM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Sergey/Hynek: I understand that this will be executed on the FWD server, but from what t... - 05:25 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey/Hynek: I understand that this will be executed on the FWD server, but from what thread? If you switch the con...
- 02:33 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, for the token refresh you will need some kind of request handler that will handle the token refresh request f...
- 12:36 PM Support #9709: Needed: Basic example of configuring separate client and server
- @WebDriverHandler.CLIENT_UUID_RELATED_SESSION_ID_PAIRS@ is also available.
- 12:08 PM Support #9709: Needed: Basic example of configuring separate client and server
- I can have only the spawner id, @WebDriverHandler.handleStartClientRequest@ if @WebDriverHandler.spawnWorker@ was suc...
- 11:57 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek, could you help with FWD API to call the client api from the server side on behalf ... - 11:06 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek, could you help with FWD API to call the client api from the server side on behalf of the authenticated user th...
- 08:51 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Roger Borrello wrote:
> > Sergey Ivanovskiy wrote:
> > > #9709-460 looks like a configurat... - 07:02 AM Support #9709: Needed: Basic example of configuring separate client and server
- The only working schema can be that the web server that handled the login page creates authentication cookie on respo...
- 04:20 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > I would like to detail this part because the secure cookie was n...
01/29/2026
- 04:28 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I would like to detail this part because the secure cookie was not set for the main ifram... - 04:10 PM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Sergey Ivanovskiy wrote:
> > #9709-460 looks like a configuration issue because client conn... - 03:20 PM Support #9709: Needed: Basic example of configuring separate client and server
- 9709b just rebased up to rev 16397.
- 03:16 PM Support #9709: Needed: Basic example of configuring separate client and server
- I would like to detail this part because the secure cookie was not set for the main iframe page for the reasons speci...
- 02:26 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > The idea is the main (root) frame/page should refresh the token ... - 01:56 PM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek, you proposed to create session short-lived authentication... - 01:53 PM Support #9709 (WIP): Needed: Basic example of configuring separate client and server
- Branch @9709c@ was merged into trunk as rev. 16370 and archived. Changed status to WIP to complete the task.
- 01:11 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek, you proposed to create session short-lived authentication/access web tokens that s... - 01:04 PM Support #9709: Needed: Basic example of configuring separate client and server
- OK. Preparing 9709c to merge.
9709 web token design to go farther
Hynek, you proposed to create session short... - 12:59 PM Support #9709 (Merge Pending): Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Could 9709c be merged into the trunk? It passed tests and change... - 12:46 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> #9709-460 looks like a configuration issue because client connection is refused.
It is... - 12:33 PM Support #9709: Needed: Basic example of configuring separate client and server
- You could compare directory.xml of hotel_gui and cact if this is possible and check the bootstrap client configuratio...
- 12:27 PM Support #9709: Needed: Basic example of configuring separate client and server
- #9709-460 looks like a configuration issue because client connection is refused.
- 12:24 PM Support #9709: Needed: Basic example of configuring separate client and server
- Fixed erroneous code in rev 16372(9709c) and rev 16380(9709b).
- 12:09 PM Support #9709: Needed: Basic example of configuring separate client and server
- I found that the target code probably should be ...
- 11:01 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> You could run java program to test host name.
Excellent... now I'm confused more. The ... - 09:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- I did not test @9709b_16379@ with @cact@ because no local setup at this moment but tested with the different large ap...
- 08:58 AM Support #9709: Needed: Basic example of configuring separate client and server
- Thanks for the clues, Sergey. One of the difficulties is the Docker image is very thin and without even the simplest ...
- 07:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger, did you try to configure @/etc/hosts@ file for each container?...
- 05:31 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger, what is the FWD version for your test environment? 9709b?
Are these instructions #9709-362 valid for hotel_gu... - 05:19 AM Support #9709: Needed: Basic example of configuring separate client and server
- Your network configuration resolves your host name as loop back address or fails to resolve this host name...
- 05:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger, this should be the network configuration issue. This exception ...
01/28/2026
- 06:55 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, my customer's configuration is almost exactly the same as the hotel configuration, which is working. But the ...
- 11:42 AM Support #9709: Needed: Basic example of configuring separate client and server
- Good plan.
- 11:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Working on 9709b but it makes sense to merge 9709c first because Nginx gives the solid so... - 11:34 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Could 9709c be merged into the trunk? It passed tests and changes are safe.
Trunk is c... - 11:31 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek, the js web client loads modules @p2j.js@, @p2j.screen.js@ and so on. Should these ... - 11:28 AM Support #9709: Needed: Basic example of configuring separate client and server
- Working on 9709b but it makes sense to merge 9709c first because Nginx gives the solid solution to this task (#9709-4...
- 11:01 AM Support #9709: Needed: Basic example of configuring separate client and server
- Could 9709c be merged into the trunk? It passed tests and changes are safe.
- 10:24 AM Support #9709: Needed: Basic example of configuring separate client and server
- Nginx has the simple configuration that is due to the customer developed this config. The new broker host ip address ...
- 10:00 AM Support #9709: Needed: Basic example of configuring separate client and server
- I updated #9709-449 to show environment settings.
- 09:55 AM Support #9709: Needed: Basic example of configuring separate client and server
- 9709c passed tests with nginx proxy server. Could this 9709c rev 16371 be merged into the trunk?
- 08:18 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek, the js web client loads modules @p2j.js@, @p2j.screen.js@ and so on. Should these modules be all private and c...
- 06:49 AM Support #9709: Needed: Basic example of configuring separate client and server
- For testing 9709c I need to use the web reverse proxy server. These settings for nginx used for the local setup of th...
- 06:26 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> @((WebClientBuilder) clientBuilder).getParams()@ returns @WebClientBuilderParameters@, bu... - 06:25 AM Support #9709: Needed: Basic example of configuring separate client and server
- @((WebClientBuilder) clientBuilder).getParams()@ returns @WebClientBuilderParameters@, but @clientBuilder.getParams()...
- 04:49 AM Support #9709 (Internal Test): Needed: Basic example of configuring separate client and server
- Code review 9709c.
The changes look fine. Just two minor points.
The cast @(WebClientBuilder) clientBuilder)@ i... - 04:21 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Created 9709c rev 16369. Please review these code again. I would like to merge this branc... - 03:34 AM Support #9709: Needed: Basic example of configuring separate client and server
- Created 9709c rev 16369. Please review these code again. I would like to merge this branch into the trunk.
- 02:37 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> This patch 9709c.patch can be merged because it was passed the review. The secure cookie ... - 02:32 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > This was just an example. The malicious code could replace any o... - 02:30 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > You found that the current code uses the public function that ca... - 02:26 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> You found that the current code uses the public function that can be fixed. XSS is not an... - 02:23 AM Support #9709: Needed: Basic example of configuring separate client and server
- This path can be merged because it was passed the review. The secure cookie is STRICT and AuthHandler not changed.
- 02:08 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg, I would like to split 9709b to 9709c that was reviewed up to rev. 16361 (9709b) and merge this version into the...
- 02:04 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > What should be patched? The web socket object is also private.
...
01/27/2026
- 01:13 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> What should be patched? The web socket object is also private.
See the example:
<pre... - 12:58 PM Support #9709: Needed: Basic example of configuring separate client and server
- I think that XSS attacks cannot reach the target aim to steal the secret key in 9709b case.
- 12:56 PM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek Cihlar wrote:
> > > To make the process more secure it is... - 12:54 PM Support #9709: Needed: Basic example of configuring separate client and server
- An important point, the CSP measures should be configurable. They could prevent Lyra from extending the site DOM and ...
- 12:50 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Please specify the security requirements that should be satisfied to implement one-time w... - 12:32 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Greg, Hynek, please note that the security requirements that you are considering are not ... - 12:30 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > To make the process more secure it is important to implement som... - 12:18 PM Support #9709: Needed: Basic example of configuring separate client and server
- Please specify the security requirements that should be satisfied to implement one-time web tokens and please explain...
- 12:09 PM Support #9709: Needed: Basic example of configuring separate client and server
- Greg, Hynek, please note that the security requirements that you are considering are not satisfied by the trunk!
If ... - 12:04 PM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> To make the process more secure it is important to implement some measures to prevent a potent... - 11:46 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> This value is not persistent in the directory. It is a temporary value delivered to the j... - 11:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> OK, then please provide a detailed description of your changes and why they are safe and secure.
... - 11:16 AM Support #9709: Needed: Basic example of configuring separate client and server
- This value is not persistent in the directory. It is a temporary value delivered to the java web client by WebClientS...
- 11:07 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Greg, I do not understand why you and Hynek decided that I implemented the described by t... - 10:40 AM Support #9709: Needed: Basic example of configuring separate client and server
- OK, then please provide a detailed description of your changes and why they are safe and secure.
- 10:32 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> > When the JS client is initialized, it received an unencrypted decryption key from Java client t... - 10:13 AM Support #9709: Needed: Basic example of configuring separate client and server
- > When the JS client is initialized, it received an unencrypted decryption key from Java client to decrypt the api to...
- 09:53 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > I still do not understand why we should use @postMessage@, the w... - 09:52 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> > Static resources (img, css, js) would either be public (they are public anyway), or fet... - 09:31 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I still do not understand why we should use @postMessage@, the web tokens can be generate... - 09:25 AM Support #9709: Needed: Basic example of configuring separate client and server
- > Static resources (img, css, js) would either be public (they are public anyway), or fetched via authenticated XHR/f...
- 09:22 AM Support #9709: Needed: Basic example of configuring separate client and server
- Yes, 9709b rev 16379 and the latest rebase trunk rev 16353.
- 09:11 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Roger Borrello wrote:
> > Sergey, am I able to test with the very latest revision of 970... - 08:58 AM Support #9709: Needed: Basic example of configuring separate client and server
- I still do not understand why we should use @postMessage@, the web tokens can be generated as it is implemented in @9...
- 08:33 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Please revisit #9709-289.
Yes, thanks. This is the @SameSite@ policy on the cookie in ... - 07:48 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > The only web authentication method that is available for the cus... - 07:47 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Sergey Ivanovskiy wrote:
> > Hynek Cihlar wrote:
> > > Code review 9709b.
> > >
> > > I h... - 07:44 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> The only web authentication method that is available for the customer that uses the dynam... - 07:40 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Hynek Cihlar wrote:
> > Code review 9709b.
> >
> > I have some comments to address in... - 06:48 AM Support #9709: Needed: Basic example of configuring separate client and server
- The only web authentication method that is available for the customer that uses the dynamic web pages is the secure c...
- 06:07 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Code review 9709b.
>
> I have some comments to address in the changes, but my biggest conce... - 05:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Hynek Cihlar wrote:
> Code review 9709b.
>
> I have some comments to address in the changes, but my biggest conce... - 04:53 AM Support #9709: Needed: Basic example of configuring separate client and server
- Code review 9709b.
I have some comments to address in the changes, but my biggest concern is the api token managem... - 04:14 AM Support #9709: Needed: Basic example of configuring separate client and server
- I have not fixed yet the test keyboard handler and not tested upload files handler. Thus in these parts can be changes.
- 03:48 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Sergey, am I able to test with the very latest revision of 9709b? Or do I need to stay with ...
01/26/2026
- 05:57 PM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, am I able to test with the very latest revision of 9709b? Or do I need to stay with 16336?
Greg, I have a... - 02:51 PM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> > No port mapping, no NAT, and each container has its own IP and DNS identity. This is what you a... - 02:20 PM Support #9709: Needed: Basic example of configuring separate client and server
- Committed rev 16378 (9709b) fixed and tested @MSG_ALLOCATE_NEW_WEB_TOKEN@.
- 10:46 AM Support #9709: Needed: Basic example of configuring separate client and server
- > No port mapping, no NAT, and each container has its own IP and DNS identity. This is what you are talking about, co...
- 08:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> To be clear: these are the things that must be visible externally:
>
> * FWD server's IP addre... - 05:16 AM Support #9709: Needed: Basic example of configuring separate client and server
- Committed rev 16375 (9709b). This is what is possible to do with the current cross-site web client page and dynamic h...
01/23/2026
- 11:17 AM Support #9709: Needed: Basic example of configuring separate client and server
- I also tried to set response headers like these Access-Control-Allow-Credentials and Access-Control-Allow-Origin with...
- 09:35 AM Support #9709 (Review): Needed: Basic example of configuring separate client and server
- 09:30 AM Support #9709: Needed: Basic example of configuring separate client and server
- @localStorage@ and @sessionStorage@ with the authentication header is not recommended approach but using secret key w...
- 09:20 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg, could 9709b be reviewed at this stage because during the review these problems could be solved.
- 09:12 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> What do we need to do to finish this work and help get this into trunk sometime next week?
It ne... - 09:03 AM Support #9709: Needed: Basic example of configuring separate client and server
- What do we need to do to finish this work and help get this into trunk sometime next week?
- 08:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Committed revision 16374(9709b) improved the web token validation logic in order to generate web token on the java we...
- 07:44 AM Support #9709: Needed: Basic example of configuring separate client and server
- To be clear: these are the things that must be visible externally:
* FWD server's IP address and Jetty port
* FWD... - 07:41 AM Support #9709: Needed: Basic example of configuring separate client and server
- As stated previously, we must not base our networking on the concept that the containers will be accessible from the ...
- 04:04 AM Support #9709: Needed: Basic example of configuring separate client and server
- > The server is visible to the broker (at least the first one) via port 3333 when I use the host name, even when runn...
01/22/2026
- 05:25 PM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> In production, orchestration tools like Kubernetes will be used in preference to Docker Compose. ... - 05:22 PM Support #9709: Needed: Basic example of configuring separate client and server
- This committed revision 16373 (9709b) was tested with one of the customers large application, found issues related to...
- 11:58 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Why it cannot use the main web server certificate?
It will work, but we will need to doc... - 11:53 AM Support #9709: Needed: Basic example of configuring separate client and server
- Why it cannot use the main web server certificate?
- 11:51 AM Support #9709: Needed: Basic example of configuring separate client and server
- Something else to consider: if the iframe is served directly by the broker host, then each broker will require its ow...
- 10:56 AM Support #9709: Needed: Basic example of configuring separate client and server
- @bash@ please.
- 10:54 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg Shah wrote:
> > Prepare the directory
> >
> > [...]
>
> Do we really need to use compose to prepare the di... - 10:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin: I agree that reverse proxy will be commonly used and often chosen. But I don't want to require reverse p...
- 10:33 AM Support #9709: Needed: Basic example of configuring separate client and server
- > Prepare the directory
>
> ... - 10:32 AM Support #9709: Needed: Basic example of configuring separate client and server
- > > Why do you use https://localhost:7443/? You should use the server address and please check these conditions, all ...
- 10:19 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> I will check this later. The only idea is to use dedicatedMode = true. It should generate... - 09:50 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> Sergey Ivanovskiy wrote:
> > Constantin, #9709-277 the second option can be used.
> I ... - 09:38 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey Ivanovskiy wrote:
> Constantin, #9709-277 the second option can be used.
I understand, but this is not just ... - 09:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin, #9709-277 the second option can be used.
- 09:18 AM Support #9709: Needed: Basic example of configuring separate client and server
- Sergey, please create a diagram how the infrastructure will look when deploying FWD with brokers.
Greg: I understa... - 09:10 AM Support #9709: Needed: Basic example of configuring separate client and server
- Constantin Asofiei wrote:
> From #10809-50:
> Sergey Ivanovskiy wrote:
> > Do you have ideas how to overcome usage... - 09:00 AM Support #9709: Needed: Basic example of configuring separate client and server
- From #10809-50:
Sergey Ivanovskiy wrote:
> Do you have ideas how to overcome usages of LAX cookies with cross-site ... - 05:17 AM Support #9709 (WIP): Needed: Basic example of configuring separate client and server
- 03:35 AM Support #9709: Needed: Basic example of configuring separate client and server
- Greg, Hynek, from the Single_Sign_On documentation ...
- 02:14 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger Borrello wrote:
> Sergey, revision 421 of Hotel GUI allows you to configure the docker compose very easily. Th... - 02:09 AM Support #9709: Needed: Basic example of configuring separate client and server
- Roger, I have no idea, the accessibility conditions should be satisfied #9709-358 in order that the broker configurat...
Also available in: Atom