Sharing JSESSIONID across two applications(war) in a wildfly instance

[sandeep.samdaria]

I have two applications which need to share the same JSESSIONID. User once logged into an application should not need login again to another application.
To achieve that the session id was being stored in the cookie. The other application used to retrieve the session and verify the user.
Now, the problem that I am facing, after upgrading to wildfly, is that the each application is producing different jsessionid. I have also tried the workaround mentioned in https://issues.jboss.org/browse/WFLY-3617, but in vain.
I have deployed the same wars in jboss-eap-6.2 and that worked for me.

I have copied the two war over here https://www.dropbox.com/sh/cq5p373wasn5svj/AACyZaBMBCGaNMaBU8zbW82Za?dl=0

In my standalone.xml, I also tried by adding the single-sign-on element. Below is the configuration :

<server name="default-server">

    <http-listener name="default" socket-binding="http"/>

    <host name="default-host" alias="localhost">

        <location name="/" handler="welcome-content"/>

        <filter-ref name="server-header"/>

        <filter-ref name="x-powered-by-header"/>

        <single-sign-on path="/"/>

    </host>

</server>

Is there any other configuration that I have missed?

Misunderstood Single Sign On Message was edited by: Sandeep Samdaria

[ctomc]

That is correct behavior. Each application needs to get its own session id for their context root.

If you want both applications to have same session, then you would need not single sign on but session sharing across applications.

you can achieve that by adding jboss-all.xml to WEB-INF of both apps with content

<jboss umlns="urn:jboss:1.0">

    <shared-session-config xmlns="urn:jboss:shared-session-config:1.0">

        <session-config>

            <cookie-config>

                <path>/</path>

            </cookie-config>

        </session-config>

    </shared-session-config>

</jboss>

[sandeep.samdaria]

After adding jboss-all.xml to my application, I am getting the following error.

16:57:32,442 ERROR [org.jboss.msc.service.fail] (MSC service thread 1-3) MSC000001: Failed to start service jboss.deployment.unit."test1-0.1.war".STRUCTURE: org.jboss.msc.service.StartException in service jboss.deployment.unit."test1-0.1.war".STRUCTURE: JBAS018733: Failed to process phase STRUCTURE of deployment "test1-0.1.war"

  at org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:166) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.msc.service.ServiceControllerImpl$StartTask.startService(ServiceControllerImpl.java:1948) [jboss-msc-1.2.2.Final.jar:1.2.2.Final]

  at org.jboss.msc.service.ServiceControllerImpl$StartTask.run(ServiceControllerImpl.java:1881) [jboss-msc-1.2.2.Final.jar:1.2.2.Final]

  at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1110) [rt.jar:1.7.0]

  at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:603) [rt.jar:1.7.0]

  at java.lang.Thread.run(Thread.java:722) [rt.jar:1.7.0]

Caused by: org.jboss.as.server.deployment.DeploymentUnitProcessingException: JBAS018774: Error loading jboss-all.xml from /home/xxx/grails-project/wildfly-8.1.0.Final/standalone/tmp/vfs/temp/temp9db78ca7eb11ba99/test1-0.1.war-285801972c8f28e9/WEB-INF/jboss-all.xml

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor.parse(JBossAllXMLParsingProcessor.java:153) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor.parse(JBossAllXMLParsingProcessor.java:128) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor.deploy(JBossAllXMLParsingProcessor.java:96) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.as.server.deployment.DeploymentUnitPhaseService.start(DeploymentUnitPhaseService.java:159) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  ... 5 more

Caused by: javax.xml.stream.XMLStreamException: ParseError at [row,col]:[2,5]

Message: Unexpected element '{urn:jboss:shared-session-config:1.0}shared-session-config'

  at org.jboss.staxmapper.XMLMapperImpl.processNested(XMLMapperImpl.java:108)

  at org.jboss.staxmapper.XMLExtendedStreamReaderImpl.handleAny(XMLExtendedStreamReaderImpl.java:69)

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor$Parser.parseJBossElement(JBossAllXMLParsingProcessor.java:203) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor$Parser.readElement(JBossAllXMLParsingProcessor.java:192) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor$Parser.readElement(JBossAllXMLParsingProcessor.java:176) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  at org.jboss.staxmapper.XMLMapperImpl.processNested(XMLMapperImpl.java:110)

  at org.jboss.staxmapper.XMLMapperImpl.parseDocument(XMLMapperImpl.java:69)

  at org.jboss.as.server.deployment.jbossallxml.JBossAllXMLParsingProcessor.parse(JBossAllXMLParsingProcessor.java:148) [wildfly-server-8.1.0.Final.jar:8.1.0.Final]

  ... 8 more

It seems that the shared-session-config schema is not available in 8.1.0.Final.

Below is my jboss-web.xml

<?xml version="1.0" encoding="UTF-8"?>

<jboss-web>

  <context-root>/test1</context-root>

  <!-- <security-domain>sso</security-domain>  -->

</jboss-web>

jboss-all.xml

<jboss umlns="urn:jboss:1.0">

    <shared-session-config xmlns="urn:jboss:shared-session-config:1.0">

        <session-config>

            <cookie-config>

                <path>/</path>

            </cookie-config>

        </session-config>

    </shared-session-config>

</jboss>

[pferraro]

Session sharing across web applications is a new feature and is only available in the master branch, on which WF 9.0 will be based.

However, you would only need this to share session attribute data between multiple applications - not for single sign on.

[sandeep.samdaria]

I think I have misunderstood Single Sign On.
Basically what I wanted was that both the application will have the same JSESSIONID.

By "share", I mean that the JSESSIONID should not change when I switch to different context . For e.g. When I visit localhost/abc, I would get JSESSIONID="ABC123" and when I visit localhost/xyz, I would get the same JSESSIONID i.e. "ABC123". In jboss-eap-6.2 this is the behavior, but in wildfly.8.1.0 when I visit localhost/xyz I get a different JSESSIONID "ZYX987" and when I revisit localhost/abc the previous session id(ABC123) is lost and I get a new id.

[pferraro]

Why do you want both applications to use the same JSESSIONID?  This sounds like a strategy, rather than a need.  Do the applications need to share the same set of session attribute?  If so, you need shared sessions.  Do the applications need to share authentication state?  If so, then you need need to enable single sign on.  These are orthogonal concerns.

[sandeep.samdaria]

Once the user successfully logs in, we persist the session id along with the user details, when the user visits the other application, we retrieve the user details based on its SESSION ID. Since both the application used to have the same session id, we were able to verify the user. After migrating from jboss-4.2.3 to wildfly-8.1.0, the applications are having different session id, hence unable to verify the user. My requirement is more of shared session.
I will give 9.X a try. Few questions for the shared session. Is it necessary that both the WARs should be in a single EAR ? Will shared session work if I deploy both the WAR independently inside deployment folder?

[pferraro]

Your requirement should like the single sign on use case, and it seems as if you are trying to implement it yourself using shared sessions.  Why not use the single sign on mechanism in WildFly, which does not require session sharing?

[sandeep.samdaria]

Is there any document/tutorial which I can follow to implement the same on wildfly-8.1.0 ? I am unable to find any such reference to implement single sign on.

Please correct me if I am wrong, this is what my understanding of single sign on is. If a user logs in to one application and then goes to the other application, then the app will be able to retrieve the user information.

Thanks for bearing my naive questions.

[pferraro]

When single sign-on is configured for a given host, once a user is logged into an application, their authentication identity is shared across all applications for that host.  To enable, add <single-sign-on/> to a <host/> within your undertow subsystem configuration.  If your applications use different context paths, you'll need to set the cookie path for the SSO cookie accordingly, e.g. <single-sign-on path="/" />.

[sandeep.samdaria]

Few questions :
In Single Sign on, where is the authentication mechanism is to be implemented ? I have the users credential in the db, how can I configure SSO to use those credentials?

How will the users information be retrieved per application ?

[pferraro]

You'll want to implement an authentication plugin and potentially an authorization plugin.  See: Security Realms - WildFly 8 - Project Documentation Editor