Return-Path: 
 <users-return-34175-apmail-cxf-users-archive=cxf.apache.org@cxf.apache.org>
X-Original-To: apmail-cxf-users-archive@www.apache.org
Delivered-To: apmail-cxf-users-archive@www.apache.org
Received: from mail.apache.org (hermes.apache.org [140.211.11.3])
	by minotaur.apache.org (Postfix) with SMTP id 018B6924B
	for <apmail-cxf-users-archive@www.apache.org>;
 Mon, 21 May 2012 18:19:02 +0000 (UTC)
Received: (qmail 51360 invoked by uid 500); 21 May 2012 18:19:01 -0000
Delivered-To: apmail-cxf-users-archive@cxf.apache.org
Received: (qmail 51318 invoked by uid 500); 21 May 2012 18:19:01 -0000
Mailing-List: contact users-help@cxf.apache.org; run by ezmlm
Precedence: bulk
List-Help: <mailto:users-help@cxf.apache.org>
List-Unsubscribe: <mailto:users-unsubscribe@cxf.apache.org>
List-Post: <mailto:users@cxf.apache.org>
List-Id: <users.cxf.apache.org>
Reply-To: users@cxf.apache.org
Delivered-To: mailing list users@cxf.apache.org
Received: (qmail 51310 invoked by uid 99); 21 May 2012 18:19:01 -0000
Received: from athena.apache.org (HELO athena.apache.org) (140.211.11.136)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 21 May 2012 18:19:01 +0000
X-ASF-Spam-Status: No, hits=1.8 required=5.0
	tests=FREEMAIL_ENVFROM_END_DIGIT,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,WEIRD_PORT
X-Spam-Check-By: apache.org
Received-SPF: pass (athena.apache.org: domain of ginachoi88@gmail.com
 designates 209.85.212.171 as permitted sender)
Received: from [209.85.212.171] (HELO mail-wi0-f171.google.com)
 (209.85.212.171)
    by apache.org (qpsmtpd/0.29) with ESMTP; Mon, 21 May 2012 18:18:56 +0000
Received: by wibhm14 with SMTP id hm14so2345369wib.6
        for <users@cxf.apache.org>; Mon, 21 May 2012 11:18:34 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
        d=gmail.com; s=20120113;
        h=mime-version:in-reply-to:references:date:message-id:subject:from:to
         :cc:content-type;
        bh=ouzu71nXsgjT1ccdEAHhVxeZmgnw6PhZgwhudKxzPHU=;
        b=kdFTPJ6ahGBlyfioI6FtXdY/yxRMecCfaK7KQj0zyR6vkzxrTlYHi+4QCQ2xxYl4Mf
         k/if9q7l15nDPqio5hbpolZImmO61g1wTeOtthtE3EHcBZQRF5CQI5sjnGlPGxmONBXx
         dlOZodZTJMzaKCsDlxOSdRomCxhTLVRBhU/EDckGyxN/KzIKmF7nw3tANxEN3jPR8kk0
         nhqK79FJW7yGP8eiSS3yvbHOONk4Sf4yiMzFWiYio9ih1rMvqpoTEkEKngcfesNoFJ6Z
         oZykNTYptCvPjPmbu9JPHTmZgmNU8HkH8VKs1h3y/npSZI4D287FPh5cLly9IgnwjzrY
         8CIA==
MIME-Version: 1.0
Received: by 10.180.94.4 with SMTP id cy4mr27803506wib.2.1337624314565; Mon,
 21 May 2012 11:18:34 -0700 (PDT)
Received: by 10.223.13.72 with HTTP; Mon, 21 May 2012 11:18:34 -0700 (PDT)
In-Reply-To: 
 <CAEnbdEDXYLU80_9vq8W0Y1PNxUJosBJ1OOSOSZsOBWE5H-M+7A@mail.gmail.com>
References: 
 <CAEnbdED0BDac+06oREYE7VWzyy_foPm5DJy6yDihYeLRDY-83A@mail.gmail.com>
	<CAEnbdECu5Y3aShXkMn_7Z1ZD8F9p1=8FA-2mBOP=Y6z5xp+uaw@mail.gmail.com>
	<79AB4452999C844D9920E0363533273116C820@S10BE002.SH10.lan>
	<CAEnbdEDXYLU80_9vq8W0Y1PNxUJosBJ1OOSOSZsOBWE5H-M+7A@mail.gmail.com>
Date: Mon, 21 May 2012 14:18:34 -0400
Message-ID: 
 <CAEnbdEDGg51wQXLtxvFF15B=TRt-YkwADJcoRum_=80=poLARg@mail.gmail.com>
Subject: Re: CXF supporting scope
From: Gina Choi <ginachoi88@gmail.com>
To: Oliver Wulff <owulff@talend.com>
Cc: "users@cxf.apache.org" <users@cxf.apache.org>
Content-Type: multipart/alternative; boundary=f46d044403841cd42d04c08fee85
X-Virus-Checked: Checked by ClamAV on apache.org

--f46d044403841cd42d04c08fee85
Content-Type: text/plain; charset=ISO-8859-1

Oliver,

I put
https://wkengchoi.global.sdl.corp:8443/fedizhelloworld/secureservlet/fed in
the browser instead of
https://wkengchoi.global.sdl.corp:8443/fedizhelloworld/secureservlet/fed/and
it is working now.

It seems that value of requestURI set based on initial URL.
On Mon, May 21, 2012 at 2:13 PM, Gina Choi <ginachoi88@gmail.com> wrote:

> Hi Oliver,
>
> Following is part of my web.xml. I don't have a slash at the end.
>
> Doesn't
> response.sendRedirect(response.encodeRedirectURL(requestURI)) expect a full
> URL rather than relative URL?
>
>
>  <servlet-mapping>
>   <servlet-name>FederationServlet</servlet-name>
>   <url-pattern>/secureservlet/fed</url-pattern>
>  </servlet-mapping>
>  <security-role>
>   <role-name>Manager</role-name>
>   <role-name>User</role-name>
>   <role-name>Admin</role-name>
>   <role-name>Authenticated</role-name>
>   <role-name>Developer</role-name>
>  </security-role>
>
> On Mon, May 21, 2012 at 2:06 PM, Oliver Wulff <owulff@talend.com> wrote:
>
>>  Remove the last slash:
>>
>>
>>
>> <servlet-mapping>
>>     <servlet-name>FederationServlet</servlet-name>
>>     <url-pattern>/secureservlet/fed</url-pattern>
>> </servlet-mapping>
>>
>>
>>
>> ------
>>
>> Oliver Wulff
>>
>> Blog: http://owulff.blogspot.com
>> Solution Architect
>> http://coders.talend.com
>>
>> <http://coders.talend.com>Talend Application Integration Division
>> http://www.talend.com
>>   ------------------------------
>> *From:* Gina Choi [ginachoi88@gmail.com]
>> *Sent:* 21 May 2012 19:56
>>
>> *To:* Oliver Wulff
>> *Cc:* users@cxf.apache.org
>> *Subject:* Re: CXF supporting scope
>>
>>   Hi Oliver,
>>
>> I am looking at
>>
>> org.apache.cxf.fediz.tomcat.FederationAuthenticator.java(line 421 -
>> 441). You have following lines and value of requestURL is "*
>> /fedizhelloworld/secureservlet/fed/*". You send "wreply" to STS and you
>> should be able to retrieve it from STS response. I don't know how Tomcat
>> manage savedRequestURL(session) internally.
>>
>>  requestURI = savedRequestURL(session);
>>
>> response.sendRedirect(response.encodeRedirectURL(requestURI));
>>
>>
>>  On Mon, May 21, 2012 at 1:49 PM, Gina Choi <ginachoi88@gmail.com> wrote:
>>
>>> Hi Oliver,
>>>
>>> I am using \fediz\trunk\examples\simpleWebapp.
>>>
>>>  On Mon, May 21, 2012 at 1:44 PM, Oliver Wulff <owulff@talend.com>wrote:
>>>
>>>>  Hi Gina
>>>>
>>>>
>>>>
>>>> Which example do you use?
>>>>
>>>>
>>>>
>>>> I've to sync that as the simple example uses:
>>>>
>>>>
>>>>
>>>> /fedizhelloworld/secureservlet/fed/
>>>>
>>>>
>>>>
>>>> whereas the wsclient example uses:
>>>>
>>>>
>>>>
>>>> /fedizhelloworld/secure/fedservlet
>>>>
>>>>
>>>>
>>>> Maybe that's the issue.
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>>
>>>> ------
>>>>
>>>> Oliver Wulff
>>>>
>>>> Blog: http://owulff.blogspot.com
>>>> Solution Architect
>>>> http://coders.talend.com
>>>>
>>>
>>
>

--f46d044403841cd42d04c08fee85--