[MAGNOLIA-8127] BoolVoterSet does not work in 5.7.x Created: 01/Jul/21  Updated: 07/Jan/22  Resolved: 07/Jan/22

Status: Closed
Project: Magnolia
Component/s: None
Affects Version/s: 5.7.10
Fix Version/s: None

Type: Bug Priority: Neutral
Reporter: Federico Grilli Assignee: Unassigned
Resolution: Won't Fix Votes: 0
Labels: maintenance
Remaining Estimate: Not Specified
Time Spent: Not Specified
Original Estimate: Not Specified

Attachments: File config.server.filters.csrfTokenSecurity.bypasses.BypassAuthenticatedInAdminCentral.yaml    
Issue Links:
relation
Template:
Acceptance criteria:
Empty
Task DoD:
[ ]* Doc/release notes changes? Comment present?
[ ]* Downstream builds green?
[ ]* Solution information and context easily available?
[ ]* Tests
[ ]* FixVersion filled and not yet released
[ ]  Architecture Decision Record (ADR)
Bug DoR:
[X]* Steps to reproduce, expected, and actual results filled
[X]* Affected version filled
Date of First Response:

 Description   

Steps to reproduce

  1.  replace /server/filters/csrfTokenSecurity/bypasses/BypassAuthenticatedInAdminCentral with config.server.filters.csrfTokenSecurity.bypasses.BypassAuthenticatedInAdminCentral.yaml (the latter is used in 6.2.10)
  2.  enable filter

Expected results

Filter is bypassed for /.magnolia/admincentral and authenticated user, Magnolia AdminCentral is accessible

Actual results

Filter is not bypassed, Magnolia AdminCentral is no longer usable

Workaround

Restore working config with GroovyRescueApp

Development notes

The following errors have been logged

  1. 2021-07-01 23:16:10,370 WARN magnolia.jcr.node2bean.impl.Node2BeanProcessorImpl: Did not manage to create a bean for node [/server/filters/csrfTokenSecurity/bypasses/BypassAuthenticatedInAdminCentral], this part of configuration will be skipped
  2. info.magnolia.jcr.node2bean.Node2BeanException: Failed to instantiate a bean of type [info.magnolia.voting.voters.BoolVoterSet] due to: [Guice configuration errors:
    info.magnolia.voting.Voter<T>[] cannot be used as a key; It is not fully specified.

Generated at Mon Feb 12 04:29:54 CET 2024 using Jira 9.4.2#940002-sha1:46d1a51de284217efdcb32434eab47a99af2938b.