404 Error: Unable to Import sha256.js in ForgeRock iframe #680
Assignees
Comments
|
Shot in the dark - but you are using http (not https) - which can cause all
sorts of problems.
…On Tue, Apr 9, 2024 at 11:03 PM sachinwalunjakar ***@***.***> wrote:
The following HTML is obtained from ForgeRock. The content of the iframe
is retrieved from the url
http://example.com/openam/oauth2/cfx_iag/connect/checkSession, where the
404 error occurs when attempting to import the sha256.js script. This
iframe is use for getting session state.
<!DOCTYPE html><!-- ~ DO NOT REMOVE COPYRIGHT NOTICES OR THIS HEADER. ~ ~ Copyright 2013-2019 ForgeRock AS. All Rights Reserved ~ ~ Use of this code requires a commercial software license with ForgeRock AS. ~ or with one of its affiliates. All use shall be exclusively subject ~ to such license between the licensee and ForgeRock AS. --><html lang="en">
<head>
<meta charset="utf-8">
<meta name="description" content="OpenIDConnect checkSession">
<title>OpenIDConnect checkSession</title>
</head>
<body style="display:none">
<script src="http://example.com/openam/XUI/js/sha256.js"></script>
<script type="text/javascript">
window.addEventListener("message", receiveMessage, false);
var client_id;
function receiveMessage(e){
data = e.data.split(' ');
client_id = data[0];
var clientURI = "";
if (e.origin !== clientURI){
return;
}
var session_state = data[1];
var opbs = getBrowserState();
var ss = CryptoJS.SHA256(client_id + e.origin + opbs).toString();
if (session_state == ss) {
stat = 'unchanged';
} else {
stat = 'changed';
}
e.source.postMessage(stat, e.origin);
}
function getBrowserState(){
var validSession = false;
if (!validSession){
return "";
}
var cookieName = "iPlanetDirectoryPro" + "=";
var cookies = document.cookie+";";
var cookieStart = cookies.indexOf(cookieName);
if (cookieStart != -1) {
var end = cookies.indexOf(";", cookieStart);
return unescape(cookies.substring(cookieStart + cookieName.length, end));
}
return "";
}
</script>
</body></html>
Getting 404 error when executing this line: <script src="
http://example.com/openam/XUI/js/sha256.js"></script>
—
Reply to this email directly, view it on GitHub
<#680>, or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AADNEZCD25VJ22MTVC23QADY4TBYVAVCNFSM6AAAAABF7XSET2VHI2DSMVQWIX3LMV43ASLTON2WKOZSGIZTINZWGA3TSNQ>
.
You are receiving this because you are subscribed to this thread.Message
ID: ***@***.***>
|
|
Hi @wstrange , I don't think this is related to HTTPS. Here http://example.com/openam/XUI/js/sha256.js url itself is throwing 404. Still, it's worth a try to host the forgerock on SSL and test again. |
|
Hi @sachinwalunjakar, what version of forgeops are you using? |
I am using ForgeRock Access Management 7.4.0. |
|
Are you using the ingress configuration that is provided in ForgeOps? In kustomize/base/ingress/ingress.yaml you'll see that there is no openam endpoint so naturally if you are using an ingress controller like nginx, nginx will throw a 404 as the path doesn't exist. Can you provide some more information about your deployment please? If you run bin/debug-logs and attach the results, it will provide most of this information |
|
I setuped forgerock on, separate |
|
Are you deploying using the forgeops tooling? Deploying the platform using forgeops requires a specific deployment model using the tooling in this repo? I need to understand more detail about what and how you've deployed to your VM. Deploying without forgeops tooling and not deploying the entire integrated platform is unsupported unfortunately by the forgeops team. You would need to engage Ping Identity(previously ForgeRock) support for on-prem product support |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
The following HTML is obtained from ForgeRock. The content of the iframe is retrieved from the url
http://example.com/openam/oauth2/cfx_iag/connect/checkSession, where the 404 error occurs when attempting to import the sha256.js script. This iframe is use for getting session state.Getting 404 error when executing this line:
<script src="http://example.com/openam/XUI/js/sha256.js"></script>The text was updated successfully, but these errors were encountered: