Re: Shiro - Session Loss

Where you able to get the log output? On Fri, Jun 18, 2021 at 3:50 PM alina.frey wrote: > A little update with my discoveries so far. > > The code breaks when upgrading from shiro 1.2.6 to shiro 1.3.0. > > I was able to access the server side as soon as I modified the URLs in > Shiro.ini to

Re: Shiro - Session Loss

A little update with my discoveries so far. The code breaks when upgrading from shiro 1.2.6 to shiro 1.3.0. I was able to access the server side as soon as I modified the URLs in Shiro.ini to reflect path without the slash "/" at the beginning of the path: [urls] /FileUploadServlet = authc

Re: Shiro - Session Loss

A little update with my discoveries so far. The code breaks when upgrading from shiro 1.2.6 to shiro 1.3.0. I was able to access the server side as soon as I modified the URLs in Shiro.ini to reflect path without the slash "/" at the beginning of the path: [urls] /FileUploadServlet = authc

Re: Shiro - Session Loss

You have two SLF4J implements on your class path, I’m guessing you need to remove SLF4J-simple. -Brian > On May 31, 2021, at 9:59 AM, alina.frey wrote: > > I have slf4j-log4j12-1.7.9.jar alongside log4j-1.2.17.jar. > Please see attached an image of all the libraries that are included in the

Re: Shiro - Session Loss

I have slf4j-log4j12-1.7.9.jar alongside log4j-1.2.17.jar. Please see attached an image of all the libraries that are included in the class path. -- Sent from: http://shiro-user.582556.n2.nabble.com/

Re: Shiro - Session Loss

Do you have the SLF4J log4j implementation on your class path? http://logging.apache.org/log4j/2.x/log4j-slf4j-impl/ -Brian > On May 28, 2021, at 3:28 PM, alina.frey wrote: > > I set up Shiro to the last working version: shiro-all-1.2.6.jar > Set logging to DEBUG, in log4j.properties: > > #

Re: Shiro - Session Loss

I set up Shiro to the last working version: shiro-all-1.2.6.jar Set logging to DEBUG, in log4j.properties: # Default Shiro logging log4j.logger.org.apache.shiro=DEBUG log4j.logger.org.apache.shiro.realm.text.PropertiesRealm=DEBUG log4j.logger.org.apache.shiro.cache.ehcache.EhCache=DEBUG

Re: Shiro - Session Loss

With that log configuration, you should see Shiro log events very request. I’d suggest turning up that last one “ThreadContext” to at least debug as well. You can try to turn them up to “trace” as well. I’d suggest taking a step back and changing one thing at a time (this is still my go to

Re: Shiro - Session Loss

I am printing logs on both sides Client and Server sides, but I cannot see any error that would help me find out why after Shiro login, the Server side is not reachable anymore. Please see below the error caught in the Client side after Shiro login and the Sever is not reachable anymore. It's the

Re: Shiro - Session Loss

Oh, a GWT app. My suggestion would be to turn up logging on both sides. I'm assuming that InvocationException has a cause. You set `org.apache.shiro` log level to DEBUG or TRACE, and you should be able to get more info. On Tue, May 25, 2021 at 3:04 PM alina.frey wrote: > I tried to pinpoint

Re: Shiro - Session Loss

I tried to pinpoint at what version of Shiro my application starts to lose session. So, nothing is changed in my application other than the shiro library. Discovered that the session loss happens starting with Shiro 1.3.2. o shiro-all.1.2.3.jar: No session loss. Login

Re: Shiro - Session Loss

Hi, You also have an overview of the jira tickets on the release notes: https://github.com/apache/shiro/blob/1.7.x/RELEASE-NOTES regards, François fpa...@apache.org Le 24/05/2021 à 17:23, Brian Demers a écrit : > Release notes: https://shiro.apache.org/news.html >

Re: Shiro - Session Loss

Release notes: https://shiro.apache.org/news.html (includes links to release notes) Diffs: https://github.com/apache/shiro/compare/shiro-root-1.2.6..shiro-root-1.3.2 Follow-ups: What is the error message that displays on your login page? What else changed in your application? Do you have a

Re: Shiro - Session Loss

Does anybody know where I can find info regarding what changed from one version of Shiro to another? Specifically I'm interested what changed from version 1.2.6 to version 1.3.2. shiro-all-1.2.3.jar: No session loss. Login works. - Current Shiro. shiro-all-1.2.6.jar: No session loss. Login works.

Re: Shiro - Session Loss

Replying to Benjamin's question related to Shiro versions where we start seeing the session loss behavior: shiro-all-1.2.3.jar: No session loss. Login works. - Current Shiro. shiro-all-1.2.6.jar: No session loss. Login works. shiro-all-1.3.2.jar: Session loss!!! So what I need to find out is

Re: Shiro - Session Loss

Responses inline: On Wed, May 19, 2021 at 5:31 PM alina.frey wrote: > 1. Anything in your logs? > If you are referring to Shiro logs, I don't know where they are recorded. > If you are referring to logs capture by my application, I do not see any of > the errors taht would be thrown by the

Re: Shiro - Session Loss

1. Anything in your logs? If you are referring to Shiro logs, I don't know where they are recorded. If you are referring to logs capture by my application, I do not see any of the errors taht would be thrown by the supporting code below. 2. What happens when the user isn't able to login? Are they

Re: Shiro - Session Loss

1. Anything in your logs? If you are referring to Shiro logs, I don't know where they are recorded. If you are referring to logs capture by my application, I do not see any of the errors taht would be thrown by the supporting code below. 2. What happens when the user isn't able to login? Are they

Re: Shiro - Session Loss

I'm new to Shiro. How do I check if sesionDAO may be over-spilling? -- Sent from: http://shiro-user.582556.n2.nabble.com/

Re: Shiro - Session Loss

sessionDAO is enterprise cache dao... We were losing sessions when our cache was misconfigured (like LRU was set with sone low size). Check your sesionDAO, it may be overspilling? Hth T On Wed, May 19, 2021, 19:36 Brian Demers wrote: > Anything in your logs? > > What happens when the user

Re: Shiro - Session Loss

Anything in your logs? What happens when the user isn't able to login? Are they redirected back to the login page? Is your browser rejecting the cookie? (or is it sent back the the server on the next request?) On Wed, May 19, 2021 at 12:04 PM alina.frey wrote: > I will try to replace Shiro

Re: Shiro - Session Loss

I will try to replace Shiro with intermediary versions between 1.2.3 and , and will get back to you with results. Meanwhile, here is what I have in the shiro.ini file. # === # Shiro INI configuration # === [main] # authorization paths shiro.loginUrl =

Re: Shiro - Session Loss

Hi Alina, thanks for your report. Can you modify your test environment in such a way that you can find the exact version where it happens for the first time? 1.2.3 to 1.7.0 is quite a big leap. Some random things which we modified and categorize as a breaking change: Default ciphers were changed

Shiro - Session Loss

In my application I updated only the Shiro library, from shiro-all-1.2.3.jar to shiro-all-1.7.0.jar. I did not change any other libraries, nor configuration files, other than the build path to refer to the new Shiro library. Users that were able to login before, are now not able to. Digging in