PH08872: THE SERVLETREQUEST.GETCONTEXTPATH() MIGHT RETURN A DIFFERENT CONTEXT PATH WHEN USING WITH OIDC CLIENT APPLICATION.

19.0.0.3: WebSphere Application Server Liberty 19.0.0.3
19.0.0.4: WebSphere Application Server Liberty 19.0.0.4
19.0.0.5: WebSphere Application Server Liberty 19.0.0.5
19.0.0.6: WebSphere Application Server Liberty 19.0.0.6
19.0.0.7: WebSphere Application Server Liberty 19.0.0.7
19.0.0.8: WebSphere Application Server Liberty 19.0.0.8
19.0.0.9: WebSphere Application Server Liberty 19.0.0.9
19.0.0.10: WebSphere Application Server Liberty 19.0.0.10
19.0.0.11: WebSphere Application Server Liberty 19.0.0.11
19.0.0.12: WebSphere Application Server Liberty 19.0.0.12
20.0.0.1: WebSphere Application Server Liberty 20.0.0.1
20.0.0.2: WebSphere Application Server Liberty 20.0.0.2
20.0.0.3: WebSphere Application Server Liberty 20.0.0.3
20.0.0.4: WebSphere Application Server Liberty 20.0.0.4
20.0.0.5: WebSphere Application Server Liberty 20.0.0.5

APAR status

• Closed as program error.

Error description

• The user accesses an endpoint protected by OIDC security.
  After
  the client intercepts, receives auth code, exchanges for
  token,
  and presents token to original endpoint, the application
  will
  build relative links incorrectly.
  In the broken situation, application images and relative
  URIs
  are broken because they are getting /oidcclient/<resource>
  instead of /contextroot/<resource>.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:  All users of IBM WebSphere Application      *
  *                  Server Liberty                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: ServletRequest.getContextPath() might   *
  *                      return wrong path when OpenID           *
  *                      Connection (OIDC) is used.              *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  After being authenticated with OIDC, the
  ServletRequest.getContextPath() API may return the OIDC
  application's context path (/oidcclient) instead of the target
  application's context path.
  

Problem conclusion

• The WebContainer is corrected to return the correct value.
  
  The fix for this APAR is currently targeted for inclusion in fix
  pack 19.0.0.3.  Please refer to the Recommended Updates page for
  delivery information:
  http://www.ibm.com/support/docview.wss?rs=180&uid=swg27004980
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WAS LIBERTY COR

• Fixed component ID

  5725L2900

Applicable component levels

• R855 PSY

     UP