Uploaded image for project: 'IGB'
  1. IGB
  2. IGBF-3204

Create secure quickload that redirects

    Details

    • Type: Task
    • Status: Closed (View Workflow)
    • Priority: Major
    • Resolution: Done
    • Affects Version/s: None
    • Fix Version/s: None
    • Labels:
      None

      Description

      Situation: As part of testing for IGBF-3196 and IGBF-3103 it would be helpful if we could test a secure quickload site that redirects from http to https.

      Task: Create a secure quickload site that redirects from http to https.

        Attachments

          Issue Links

            Activity

            nfreese Nowlan Freese created issue -
            nfreese Nowlan Freese made changes -
            Field Original Value New Value
            Epic Link IGBF-1765 [ 17855 ]
            nfreese Nowlan Freese made changes -
            Link This issue relates to IGBF-3196 [ IGBF-3196 ]
            nfreese Nowlan Freese made changes -
            Link This issue relates to IGBF-3103 [ IGBF-3103 ]
            Hide
            nfreese Nowlan Freese added a comment -

            These are the two secure http quickload sites we currently use for testing that do not require a redirect:

            http://igbquickload.org/secureQuickloadTestSites/secureSiteTest

            http://igbquickload.org/secureQuickloadTestSites/secureSiteTest2

            Show
            nfreese Nowlan Freese added a comment - These are the two secure http quickload sites we currently use for testing that do not require a redirect: http://igbquickload.org/secureQuickloadTestSites/secureSiteTest http://igbquickload.org/secureQuickloadTestSites/secureSiteTest2
            ann.loraine Ann Loraine made changes -
            Status To-Do [ 10305 ] In Progress [ 3 ]
            ann.loraine Ann Loraine made changes -
            Status In Progress [ 3 ] To-Do [ 10305 ]
            ann.loraine Ann Loraine made changes -
            Status To-Do [ 10305 ] In Progress [ 3 ]
            Hide
            ann.loraine Ann Loraine added a comment -

            I have created a new location with password protection and redirection set up.

            To see this in action:

            I can't tell when the redirection happens - before or after user name and password challenge occurs.

            Show
            ann.loraine Ann Loraine added a comment - I have created a new location with password protection and redirection set up. To see this in action: Visit URL http://bioviztest3.bioviz.org/quickload/password-protected-example Observe that a dialog appears requested you to enter a user name and password Enter user "guest" and password "guest" If the password is entered correctly, the Web browser will show URL https://bioviztest3.bioviz.org/quickload/password-protected-example I can't tell when the redirection happens - before or after user name and password challenge occurs.
            ann.loraine Ann Loraine made changes -
            Status In Progress [ 3 ] Needs 1st Level Review [ 10005 ]
            ann.loraine Ann Loraine made changes -
            Assignee Ann Loraine [ aloraine ]
            Hide
            ann.loraine Ann Loraine added a comment - - edited

            I have created a new redirection testing resource on bioviztest3.bioviz.org in which the password challenge is meant to occur after the redirection response is received by the client.

            The Apache configuration file (httpd.conf) contains the following line:

            Redirect /bogus/redirect-example /quickload/redirect-example
            

            If a user attempts to retrieve https://bioviztest3.bioviz.org/bogus/redirect-example, then the Apache web server will redirect the client to resource https://bioviztest3.bioviz.org/quickload/redirect-example. This new location contains Apache configuration files that will trigger it to request a user name and a password from the client. The only user name and password combination that it will accept are: "guest2" and "guest2".

            The other user name and password combination won't work.

            Show
            ann.loraine Ann Loraine added a comment - - edited I have created a new redirection testing resource on bioviztest3.bioviz.org in which the password challenge is meant to occur after the redirection response is received by the client. The Apache configuration file (httpd.conf) contains the following line: Redirect /bogus/redirect-example /quickload/redirect-example If a user attempts to retrieve https://bioviztest3.bioviz.org/bogus/redirect-example , then the Apache web server will redirect the client to resource https://bioviztest3.bioviz.org/quickload/redirect-example . This new location contains Apache configuration files that will trigger it to request a user name and a password from the client. The only user name and password combination that it will accept are: "guest2" and "guest2". The other user name and password combination won't work.
            Hide
            ann.loraine Ann Loraine added a comment -

            Added new password-protected quickloads to aloraine fork https://bitbucket.org/aloraine/bioviz branch IGBF-3204.
            Will submit PR to bioviz and merge.

            Show
            ann.loraine Ann Loraine added a comment - Added new password-protected quickloads to aloraine fork https://bitbucket.org/aloraine/bioviz branch IGBF-3204 . Will submit PR to bioviz and merge.
            ann.loraine Ann Loraine made changes -
            Status Needs 1st Level Review [ 10005 ] First Level Review in Progress [ 10301 ]
            ann.loraine Ann Loraine made changes -
            Status First Level Review in Progress [ 10301 ] Ready for Pull Request [ 10304 ]
            ann.loraine Ann Loraine made changes -
            Assignee Ann Loraine [ aloraine ]
            ann.loraine Ann Loraine made changes -
            Status Ready for Pull Request [ 10304 ] Pull Request Submitted [ 10101 ]
            ann.loraine Ann Loraine made changes -
            Status Pull Request Submitted [ 10101 ] Reviewing Pull Request [ 10303 ]
            ann.loraine Ann Loraine made changes -
            Status Reviewing Pull Request [ 10303 ] Merged Needs Testing [ 10002 ]
            ann.loraine Ann Loraine made changes -
            Assignee Ann Loraine [ aloraine ]
            ann.loraine Ann Loraine made changes -
            Status Merged Needs Testing [ 10002 ] Post-merge Testing In Progress [ 10003 ]
            ann.loraine Ann Loraine made changes -
            Resolution Done [ 10000 ]
            Status Post-merge Testing In Progress [ 10003 ] Closed [ 6 ]
            ann.loraine Ann Loraine made changes -
            Assignee Ann Loraine [ aloraine ]
            karthik Karthik Raveendran made changes -
            Link This issue is blocked by IGBF-3211 [ IGBF-3211 ]

              People

              • Assignee:
                ann.loraine Ann Loraine
                Reporter:
                nfreese Nowlan Freese
              • Votes:
                0 Vote for this issue
                Watchers:
                2 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved: