Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue Details[ Jump to Notes ] [ Issue History ] [ Print ]
ID
0033935
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Retail Modules] StoreServermajorhave not tried2016-09-09 08:532016-11-22 09:12
ReportermtaalView Statuspublic 
Assigned Tomtaal 
PrioritynormalResolutionfixedFixed in Version
StatusclosedFix in branchFixed in SCM revisionfb756d8610aa
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Merge Request Status
Review Assigned Tomigueldejuana
OBNetwork customerNo
Support ticket
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0033935: Get token call from webpos uses expired token and then continuously repeats itself, filling the log

DescriptionSomehow the server state background process uses an expired token. This is shown by the repeated stacktrace [1] in the central server when the server status background process is being run periodically.

[1]
cdb72c84 2016-09-09 06:00:30,058 [TP-Processor6] INFO org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager - Authentication login failed, continueing with standard login approach
org.openbravo.authentication.AuthenticationException: Invalid token xB1RC9zjd9ILljfcODBzkQ==__;__JhKN1J+EV1pVLV51QsqwT4NV0O0LHsyByiHtVFH0aKB3mZR8EPDNwbpz+xNElPdHHI6P7KhLuXp8+IkqPsIR3GsnfYULUXHJKU3rCx78wTI6Df6eMycoWmEAbFpyjZSh/P27QzIW51LhCneIwYgQ95hqZuMc1qryJXOlWJDnNfT1GUooEJsufKCgHQmf+ySj0A8QBa1H7V8U/V2ATos49w==
        at org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils.decrypt(MobileAuthenticationKeyUtils.java:194)
        at org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager.doAuthenticate(MobileKeyAuthenticationManager.java:58)
        at org.openbravo.authentication.AuthenticationManager.authenticate(AuthenticationManager.java:143)
        at org.openbravo.base.secureApp.HttpSecureAppServlet.service(HttpSecureAppServlet.java:196)
        at org.openbravo.client.kernel.BaseKernelServlet.callServiceInSuper(BaseKernelServlet.java:87)
        at org.openbravo.mobile.core.process.WebServiceAuthenticatedServlet.service(WebServiceAuthenticatedServlet.java:60)
        at javax.servlet.http.HttpServlet.service(HttpServlet.java:717)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:290)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:206)
        at org.openbravo.replication.symmetricds.ServletDisablerDuringTableReloadFilter.doFilter(ServletDisablerDuringTableReloadFilter.java:64)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:235)
Steps To ReproduceInstall multi-server
Set short token expiry interval by when logging in set breakpoint here:
      OB.UTIL.localStorage.setItem('tokenRefreshInterval', getPreference('OBMOBC_RequestRouterTokenRefreshInterval', 10 * 60000, OB.UTIL.localStorage.getItem('tokenRefreshInterval') || 30 * 60000));
and then stepover and execute this in the console:
OB.UTIL.localStorage.setItem('tokenRefreshInterval', 10000);

Login with webpos
stop store server
wait for token to expire
start store server
next get token will throw exception in log
TagsNo tags attached.
Attached Files

- Relationships [ Relation Graph ] [ Dependency Graph ]
causes defect 0034474 closedmtaal [STORE SERVER 2065] 

-  Notes
(0090510)
mtaal (viewer)
2016-10-10 09:38

 2016-10-10 07:36:23,427 [TP-Processor8] INFO org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager - 88.26.229.145
2016-10-10 07:36:23,427 [TP-Processor8] INFO org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager - /openbravo/org.openbravo.mobile.core.service.jsonrest/org.openbravo.mobile.core.authenticate.GetToken/%7B%22parameters%22:%7B%22ignoreForConnectionStatus%22:%7B%22value%22:true,%22type%22:%22boolean%22%7D%7D,%22client%22:%229404134F8B374DEE92E79CD87B834E19%22,%22organization%22:%22EFDB6F7452204D69856CE64B57B06960%22,%22pos%22:%22C16BB8D7DEFC4406814E1A970DFDF092%22,%22terminalName%22:%2221404%22,%22appName%22:%22WebPOS%22%7D
2016-10-10 07:36:23,427 [TP-Processor8] INFO org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager - http://52.31.227.242/openbravo/org.openbravo.mobile.core.service.jsonrest/org.openbravo.mobile.core.authenticate.GetToken/%7B%22parameters%22:%7B%22ignoreForConnectionStatus%22:%7B%22value%22:true,%22type%22:%22boolean%22%7D%7D,%22client%22:%229404134F8B374DEE92E79CD87B834E19%22,%22organization%22:%22EFDB6F7452204D69856CE64B57B06960%22,%22pos%22:%22C16BB8D7DEFC4406814E1A970DFDF092%22,%22terminalName%22:%2221404%22,%22appName%22:%22WebPOS%22%7D [^]
2016-10-10 07:36:23,427 [TP-Processor8] INFO org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager - authenticationClient=9404134F8B374DEE92E79CD87B834E19&authenticationToken=pw2vP%2FSjQZlIz80ep403ww%3D%3D__%3B__%2FFFh%2Fprveiw7TPNRGouys%2BZpEY%2F43tSUwPD7%2B9ojA9BTeUEvPF6h4k9f4jV5oMA6kYSQmvahM3ONdqCOPHSZdZZpuL%2FvbIB%2FnRG8E5Pla2Gi4H1q0zIVwjFuYDH4yfrbALnXBK7%2FSR5OGdfeGsVggd5LDK3GVGx1fdpQO13iRfI539XCPHYzRKMUBDkBWNGW7qsViEF6iEuwhGbkngwZBw%3D%3D
2016-10-10 07:36:45,420 [TP-Processor7] INFO org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils - Token Timestamp Fri Sep 30 17:35:50 UTC 2016
2016-10-10 07:36:45,423 [TP-Processor7] INFO org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils - Token Date Mon Oct 10 07:36:45 UTC 2016
2016-10-10 07:36:45,423 [TP-Processor7] INFO org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils - 9404134F8B374DEE92E79CD87B834E19
2016-10-10 07:36:45,423 [TP-Processor7] INFO org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils - EFDB6F7452204D69856CE64B57B06960
2016-10-10 07:36:45,423 [TP-Processor7] INFO org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils - 008F4C0F7532485ABD55E399EAB230F2
2016-10-10 07:36:45,423 [TP-Processor7] INFO org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils - 100
2016-10-10 07:36:45,423 [TP-Processor7] ERROR org.openbravo.authentication.AuthenticationException - Invalid token pw2vP/SjQZlIz80ep403ww==__;__/FFh/prveiw7TPNRGouys+ZpEY/43tSUwPD7+9ojA9BTeUEvPF6h4k9f4jV5oMA6kYSQmvahM3ONdqCOPHSZdZZpuL/vbIB/nRG8E5Pla2Gi4H1q0zIVwjFuYDH4yfrbALnXBK7/SR5OGdfeGsVggd5LDK3GVGx1fdpQO13iRfI539XCPHYzRKMUBDkBWNGW7qsViEF6iEuwhGbkngwZBw==
org.openbravo.authentication.AuthenticationException: Invalid token pw2vP/SjQZlIz80ep403ww==__;__/FFh/prveiw7TPNRGouys+ZpEY/43tSUwPD7+9ojA9BTeUEvPF6h4k9f4jV5oMA6kYSQmvahM3ONdqCOPHSZdZZpuL/vbIB/nRG8E5Pla2Gi4H1q0zIVwjFuYDH4yfrbALnXBK7/SR5OGdfeGsVggd5LDK3GVGx1fdpQO13iRfI539XCPHYzRKMUBDkBWNGW7qsViEF6iEuwhGbkngwZBw==
        at org.openbravo.mobile.core.authenticate.MobileAuthenticationKeyUtils.decrypt(MobileAuthenticationKeyUtils.java:210)
        at org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager.doInternalAuthenticate(MobileKeyAuthenticationManager.java:74)
        at org.openbravo.mobile.core.authenticate.MobileKeyAuthenticationManager.doAuthenticate(MobileKeyAuthenticationManager.java:60)
        at org.openbravo.authentication.AuthenticationManager.authenticate(AuthenticationManager.java:143)
        at org.openbravo.base.secureApp.HttpSecureAppServlet.service(HttpSecureAppServlet.java:196)
        at org.openbravo.client.kernel.BaseKernelServlet.callServiceInSuper(BaseKernelServlet.java:87)
(0090654)
hgbot (developer)
2016-10-18 08:31

 Repository: erp/pmods/org.openbravo.mobile.core
Changeset: fb756d8610aa5ed84f1736814fb3244f1be5a7ad
Author: Martin Taal <martin.taal <at> openbravo.com>
Date: Tue Oct 18 08:31:19 2016 +0200
URL: http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/fb756d8610aa5ed84f1736814fb3244f1be5a7ad [^]

Fixes issue 33935: Get token call from webpos uses expired token and then continuously repeats itself, filling the log
Make ping service handle 401, if more than soo many pings fail then stop

---
M web/org.openbravo.mobile.core/source/data/ob-requestrouter.js
---
(0091727)
migueldejuana (viewer)
2016-11-22 09:03

 OB.MobileApp.model.lock(); lines are removed accidentally
(0091729)
migueldejuana (viewer)
2016-11-22 09:12

 Tested and reviewed

- Issue History
Date Modified Username Field Change
2016-09-09 08:53 mtaal New Issue
2016-09-09 08:53 mtaal Assigned To => mtaal
2016-09-09 08:53 mtaal OBNetwork customer => No
2016-09-09 08:53 mtaal Triggers an Emergency Pack => No
2016-10-10 09:38 mtaal Note Added: 0090510
2016-10-10 09:39 mtaal Summary Server state background process uses expired token => Get token call from webpos uses expired token and then continuously repeats itself, filling the log
2016-10-10 09:39 mtaal Steps to Reproduce Updated View Revisions
2016-10-10 11:09 mtaal Steps to Reproduce Updated View Revisions
2016-10-18 08:31 hgbot Checkin
2016-10-18 08:31 hgbot Note Added: 0090654
2016-10-18 08:31 hgbot Status new => resolved
2016-10-18 08:31 hgbot Resolution open => fixed
2016-10-18 08:31 hgbot Fixed in SCM revision => http://code.openbravo.com/erp/pmods/org.openbravo.mobile.core/rev/fb756d8610aa5ed84f1736814fb3244f1be5a7ad [^]
2016-10-22 15:56 mtaal Review Assigned To => migueldejuana
2016-11-13 23:21 mtaal Relationship added causes 0034474
2016-11-22 09:03 migueldejuana Note Added: 0091727
2016-11-22 09:12 migueldejuana Note Added: 0091729
2016-11-22 09:12 migueldejuana Status resolved => closed

Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker