You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Summary
Websocket connection is not authenticated properly when changing password and refreshing the page.
Steps to reproduce
Login
Open devtools
Change password of logged in user
Refresh the page
Actual Result
Console prints error:
Uncaught SyntaxError: Unexpected token H in JSON at position 0
at JSON.parse (<anonymous>)
Expected Result
Websocket connection is authenticated
Details about your environment
OroPlatform version: 4.2.9
PHP version: 8.0.16
Additional information
Issue is that once the user is loaded in the entity manager, during the websocket server runtime, it is never refreshed from the database. So it will still use the old password (hash) for creating the ticket digest.
Reference: oro/platform/src/Oro/Bundle/SyncBundle/Security/TicketAuthenticationProvider.php:122
The text was updated successfully, but these errors were encountered:
Summary
Websocket connection is not authenticated properly when changing password and refreshing the page.
Steps to reproduce
Actual Result
Console prints error:
Expected Result
Websocket connection is authenticated
Details about your environment
Additional information
Issue is that once the user is loaded in the entity manager, during the websocket server runtime, it is never refreshed from the database. So it will still use the old password (hash) for creating the ticket digest.
Reference:
oro/platform/src/Oro/Bundle/SyncBundle/Security/TicketAuthenticationProvider.php:122
The text was updated successfully, but these errors were encountered: