Openbravo Issue Tracking System - Retail Modules
View Issue Details
IDProjectCategoryView StatusDate SubmittedLast Update
0035770Retail ModulesWeb POSpublic2017-04-12 13:082017-04-25 10:52
Reporternataliag 
Assigned ToRetail 
PrioritynormalSeveritymajorReproducibilityalways
StatusacknowledgedResolutionopen 
PlatformOS5OS Version
Product Version 
Target VersionFixed in Version 
Merge Request Status
Review Assigned To
OBNetwork customerOBPS
Support ticket46264
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary0035770: Auto login in web POS is not working
DescriptionWhen the Openbravo.properties is changed and the authentication.class is set as:
authentication.class=org.openbravo.authentication.basic.AutologonAuthenticationManager
authentication.autologon.username=Openbravo

The backend works correctly and the autologin is done using "Openbravo" but in webPOS it does not work. And it is not possible to do login anymore.
Steps To Reproduce1- Modify the Openbravo.properties of an environment and set the Authentication part as follows:
authentication.class=org.openbravo.authentication.basic.AutologonAuthenticationManager
authentication.autologon.username=Openbravo

2- Save it and compile the application
3- Go to backend url and the login is done automatically, which is correct.
4- Now, try it in the web POS. If you insert the webPOS url, the autologin does not work and the authentication is required.
5- When you try to login using the username and the password, an error is shown and it is not possible to enter.
 
Proposed Solution
Additional Information
TagsNo tags attached.
Relationships
Attached Files
Issue History
Date ModifiedUsernameFieldChange
2017-04-12 13:08nataliagNew Issue
2017-04-12 13:08nataliagAssigned To => Retail
2017-04-12 13:08nataliagOBNetwork customer => Yes
2017-04-12 13:08nataliagSupport ticket => 46264
2017-04-12 13:08nataliagResolution time => 1491170400
2017-04-12 13:08nataliagTriggers an Emergency Pack => No
2017-04-12 13:45marvintmResolution time1491170400 => 1493762400
2017-04-20 11:49jorge-garciaStatusnew => scheduled
2017-04-20 11:49jorge-garciaAssigned ToRetail => jorge-garcia
2017-04-24 13:11marvintmResolution time1493762400 =>
2017-04-24 13:11marvintmNote Added: 0096131
2017-04-24 13:11marvintmTypedefect => design defect
2017-04-25 10:52jorge-garciaAssigned Tojorge-garcia => Retail
2017-04-25 10:52jorge-garciaStatusscheduled => acknowledged

Notes
(0096131)
marvintm   
2017-04-24 13:11   
Finally, for now we are considering this a design defect, and it's not even clear if we would want to fix it, as having a system perform auto-login is potentially insecure.

The implementation in the Web POS would have specific difficulties, such as interaction with the Terminal Authentication mechanism.