Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Find some problems #794

Open
qq1176914912 opened this issue Oct 20, 2024 · 10 comments
Open

Find some problems #794

qq1176914912 opened this issue Oct 20, 2024 · 10 comments
Assignees
Labels
bug Something isn't working

Comments

@qq1176914912
Copy link

qq1176914912 commented Oct 20, 2024

Hello, excuse me, I found a problem:
1、When I use https://localhost:5002/master/clients after the success of the login, just click exit, will stay on the page, And displays "Sorry, there's nothing at this address." This is the left function can be used normally, but in fact has been successfully exited:
image
As before, clicking the exit button will jump to the 5001 system for exit operation.
I also try to your deployment project: https://website.simpleidserver.com/, click on the project, also won't jump, but shows "Sorry, there 's nothing at this address.".
2、As for the form above 5002, do you have an arrangement to add a search box? In order to deal with the large amount of data, convenient search and positioning?

@simpleidserver
Copy link
Owner

Indeed, the logout link is no longer working due to an issue in the 'RealmRouter.' :(

The changes have been published to the master branch. Could you try again?

I've created a new ticket (#795) to support 'advanced search' on the screen that contains a table.

@simpleidserver simpleidserver self-assigned this Oct 21, 2024
@simpleidserver simpleidserver added the bug Something isn't working label Oct 21, 2024
@qq1176914912
Copy link
Author

qq1176914912 commented Oct 22, 2024

Indeed, the logout link is no longer working due to an issue in the 'RealmRouter.' :(

The changes have been published to the master branch. Could you try again?

I've created a new ticket (#795) to support 'advanced search' on the screen that contains a table.

Thank you for your reply. I have tested it, and now it is possible to exit normally and jump to the login page, but the 'Manual action is required to revoke a session' configuration on the client side does not work. No matter whether it is checked or not, the page for manually ending a session will not appear.
This causes the account's previous login information to remain active:
image
is it normal that even if you do not select "Manual action is required to revoke a session" and click to withdraw, the session status should become inactive

@qq1176914912
Copy link
Author

qq1176914912 commented Oct 22, 2024

I found some new problems:
1、Users who only have view permissions can still do the following:
image
image
Identity Scope Mappers of type User property and User attribute in Scope can be edited:
image
"Registration" in acrs can also be modified normally, which should be disabled:
image
Start buttons in Scim and LDAP
image
Everything in Authentications can be updated:
image
image
External identity providers in Authentications can also be updated:
image
The above content should not be accessible to users with view permissions only.
2、Go to the External identity providers menu in Authentications, and when editing the external login, the Properties and Mappers pages cannot be accessed:
image
image
3、When I create a new realm in master, I switch to this realm, which takes me to the login page, and when I successfully log in to this realm, I click the Exit button, which takes me back to master instead of ending the session and taking me to the login page, and I have to click Exit again in master
4、The Extract in the new realm is empty, should SCIM and LDAP be added by default?
image
5、So let's say I have two realms, I log in to a master realm using administrator, and then I click Toggle realm to switch to a realm called testrealm, which will take me to the login page to log in again, I log in with the user name testuser3 (which doesn't exist in the master realm), and when I log in successfully, I switch back to the master realm, so I don't have to log in again. What's the logic here? The testuser3 user I logged in from testrealm doesn't exist in master. Should I log in again as well? Or will the two users' tokens automatically switch between realms?

@qq1176914912
Copy link
Author

6、The default administrator group created by Groups in the newly created realm is updated incorrectly
image

@qq1176914912
Copy link
Author

7、May be due to increased access problems now, visit https://localhost:5002/master/clients now, after login successfully, then the same browser to visit https://localhost:5001/master and log in again, There is no need to log in again without adding permissions.

@simpleidserver
Copy link
Owner

The button to revoke the user's session is not displayed.

This issue has been fixed in the master branch. The cookie name used by the administration website was incorrect.

Users with READ permissions must not be able to update entities.

This permission issue has been fixed in the master branch.

Navigation is not working on the Identity Provider screen.

This navigation issue has been fixed in the master branch.

After logout, the user agent is redirected to the master realm.

The redirection problem has been fixed in the master branch.

Logging in with two different users in two different realms.

If you log in to the master realm with the administrator user and to the testrealm realm with the testuser3 user, you will have two active sessions. It won't be necessary to authenticate again. You’ll automatically be authenticated with the correct user based on the realm.

Group update date and time are invalid.

This issue has been fixed in the master branch.

After logging in to https://localhost:5002/master/clients and browsing the website https://localhost:5001/master, the login window is displayed.

This issue has also been fixed in the master branch.

@qq1176914912
Copy link
Author

The button to revoke the user's session is not displayed.

This issue has been fixed in the master branch. The cookie name used by the administration website was incorrect.

Users with READ permissions must not be able to update entities.

This permission issue has been fixed in the master branch.

Navigation is not working on the Identity Provider screen.

This navigation issue has been fixed in the master branch.

After logout, the user agent is redirected to the master realm.

The redirection problem has been fixed in the master branch.

Logging in with two different users in two different realms.

If you log in to the master realm with the administrator user and to the testrealm realm with the testuser3 user, you will have two active sessions. It won't be necessary to authenticate again. You’ll automatically be authenticated with the correct user based on the realm.

Group update date and time are invalid.

This issue has been fixed in the master branch.

After logging in to https://localhost:5002/master/clients and browsing the website https://localhost:5001/master, the login window is displayed.

This issue has also been fixed in the master branch.

Thanks for your reply, these problems have been solved after testing

@qq1176914912
Copy link
Author

qq1176914912 commented Oct 23, 2024

Sorry to bother you, but I found a new problem:

  1. Select the Identity Resource type in the Scopes. After entering the Mappers, select User property. There is no response when you click the first time, and the page keeps loading after the second click. Can I edit the maaper whose type is User property?
  2. After clicking the Add client role button in Groups, as long as the Role page is expanded, that is, the permission page, and then click the Scope menu, the content of the permission will be replaced with Scope
  3. External identity providers in Authentications, select one to edit,
    Go to Mappers and select USERATTRIBUTE to edit it. There is also a save button if users only have viewing rights. When the USERPROPERTY type is selected for editing, there is no save button, even for users with edit permissions, and once entered, there is no way to go back to the previous page
  4. Extract Mapping rules option, only users with viewing permissions still show the save button, that is, you can edit it

The first three questions have been recorded on video for your convenience:
view.zip

@qq1176914912
Copy link
Author

5、Registration Workflows when a new registration Is added, if 'Is default? 'After the creation Is successful, the table will not cancel the previous Is default, resulting in two checked states:
image
image

@simpleidserver
Copy link
Owner

simpleidserver commented Oct 26, 2024

All the issues are fixed in the master branch :) can-you try again?

@simpleidserver simpleidserver closed this as completed by moving to Done in Release 5.0.3 Oct 26, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
Status: Done
Development

No branches or pull requests

2 participants