PH02750: JAVA.LANG.CLASSCASTEXCEPTION OCCURS IN OIDCCLIENTIMPL.LOGOUT

18.0.0.4: WebSphere Application Server Liberty 18.0.0.4
19.0.0.1: WebSphere Application Server Liberty 19.0.0.1
19.0.0.2: WebSphere Application Server Liberty 19.0.0.2
19.0.0.3: WebSphere Application Server Liberty 19.0.0.3
19.0.0.4: WebSphere Application Server Liberty 19.0.0.4
19.0.0.5: WebSphere Application Server Liberty 19.0.0.5
19.0.0.6: WebSphere Application Server Liberty 19.0.0.6
19.0.0.7: WebSphere Application Server Liberty 19.0.0.7
19.0.0.8: WebSphere Application Server Liberty 19.0.0.8
19.0.0.9: WebSphere Application Server Liberty 19.0.0.9
19.0.0.10: WebSphere Application Server Liberty 19.0.0.10
19.0.0.11: WebSphere Application Server Liberty 19.0.0.11
19.0.0.12: WebSphere Application Server Liberty 19.0.0.12
20.0.0.1: WebSphere Application Server Liberty 20.0.0.1
20.0.0.2: WebSphere Application Server Liberty 20.0.0.2
20.0.0.3: WebSphere Application Server Liberty 20.0.0.3
20.0.0.4: WebSphere Application Server Liberty 20.0.0.4
20.0.0.5: WebSphere Application Server Liberty 20.0.0.5

APAR status

• Closed as program error.

Error description

• When porting from twas to liberty we are observing a
  classCastException when configured with openId connect
  during
  log out.
  
  
  The exception looks like this:
  
  java.lang.ClassCastException:
  com.ibm.bpm.servlet.filters.GenericSecurityServletRequestWra
  pper
  incompatible with
  com.ibm.wsspi.webcontainer.servlet.IExtendedRequest
  at
  com.ibm.ws.security.openidconnect.client.internal.OidcClient
  Impl
  .logout(OidcClientImpl.java:565)
  at
  com.ibm.ws.webcontainer.security.AuthenticateApi.logoutUnpro
  tect
  edResourceServiceRef(AuthenticateApi.java:206)
  at
  com.ibm.ws.webcontainer.security.AuthenticateApi.logout(Auth
  enti
  cateApi.java:167)
  at
  com.ibm.ws.webcontainer.security.internal.FormLogoutExtensio
  nPro
  cessor.formLogout(FormLogoutExtensionProcessor.java:106)
  at
  com.ibm.ws.webcontainer.security.internal.FormLogoutExtensio
  nPro
  cessor.access$000(FormLogoutExtensionProcessor.java:46)
  at
  com.ibm.ws.webcontainer.security.internal.FormLogoutExtensio
  nPro
  cessor$1.run(FormLogoutExtensionProcessor.java:76)
  at
  java.security.AccessController.doPrivileged(AccessController
  .jav
  a:696)
  at
  com.ibm.ws.webcontainer.security.internal.FormLogoutExtensio
  nPro
  cessor.handleRequest(FormLogoutExtensionProcessor.java:73)
  at
  com.ibm.ws.webcontainer.filter.WebAppFilterChain.invokeTarge
  t(We
  bAppFilterChain.java:182)
  at
  com.ibm.ws.webcontainer.filter.WebAppFilterChain.doFilter(We
  bApp
  FilterChain.java:93)
  at
  com.ibm.bpm.servlet.filters.LogoutFilter.doFilter(LogoutFilt
  er.j
  ava:102)
  at
  com.ibm.ws.webcontainer.filter.FilterInstanceWrapper.doFilte
  r(Fi
  lterInstanceWrapper.java:201)
  .....
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:  Users of IBM WebSphere Application Server   *
  *                  Liberty and OpenID Connect                  *
  ****************************************************************
  * PROBLEM DESCRIPTION: java.lang.ClassCastException may occur  *
  *                      in OidcClientImpl.logout                *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  A java.lang.ClassCastException error may occur in the OpenID
  Connect client at
  com.ibm.ws.security.openidconnect.client.internal.OidcClientImpl
  .logout(OidcClientImpl.java:565):
  
  java.lang.ClassCastException:
  com.ibm.bpm.servlet.filters.GenericSecurityServletRequestWrapper
  incompatible with
  com.ibm.wsspi.webcontainer.servlet.IExtendedRequest
  at
  com.ibm.ws.security.openidconnect.client.internal.OidcClientImpl
  .logout(OidcClientImpl.java:565)
  ..
  

Problem conclusion

• The java.lang.ClassCastException in OidcClientImpl.logout is
  resolved.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 18.0.0.4.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS LIBERTY COR

• Fixed component ID

  5725L2900

Applicable component levels

• RCD0 PSY

     UP