{"action":"closed","issue":{"url":"https://api.github.com/repos/AbsaOSS/enceladus/issues/1122","repository_url":"https://api.github.com/repos/AbsaOSS/enceladus","labels_url":"https://api.github.com/repos/AbsaOSS/enceladus/issues/1122/labels{/name}","comments_url":"https://api.github.com/repos/AbsaOSS/enceladus/issues/1122/comments","events_url":"https://api.github.com/repos/AbsaOSS/enceladus/issues/1122/events","html_url":"https://github.com/AbsaOSS/enceladus/issues/1122","id":544937509,"node_id":"MDU6SXNzdWU1NDQ5Mzc1MDk=","number":1122,"title":"SPNEGO requests treated as replay attacks","user":{"login":"GeorgiChochov","id":20905867,"node_id":"MDQ6VXNlcjIwOTA1ODY3","avatar_url":"https://avatars3.githubusercontent.com/u/20905867?v=4","gravatar_id":"","url":"https://api.github.com/users/GeorgiChochov","html_url":"https://github.com/GeorgiChochov","followers_url":"https://api.github.com/users/GeorgiChochov/followers","following_url":"https://api.github.com/users/GeorgiChochov/following{/other_user}","gists_url":"https://api.github.com/users/GeorgiChochov/gists{/gist_id}","starred_url":"https://api.github.com/users/GeorgiChochov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GeorgiChochov/subscriptions","organizations_url":"https://api.github.com/users/GeorgiChochov/orgs","repos_url":"https://api.github.com/users/GeorgiChochov/repos","events_url":"https://api.github.com/users/GeorgiChochov/events{/privacy}","received_events_url":"https://api.github.com/users/GeorgiChochov/received_events","type":"User","site_admin":false},"labels":[{"id":1134014100,"node_id":"MDU6TGFiZWwxMTM0MDE0MTAw","url":"https://api.github.com/repos/AbsaOSS/enceladus/labels/Menas","name":"Menas","color":"f9b71b","default":false,"description":"Menas component affected"},{"id":1102957659,"node_id":"MDU6TGFiZWwxMTAyOTU3NjU5","url":"https://api.github.com/repos/AbsaOSS/enceladus/labels/bug","name":"bug","color":"d73a4a","default":true,"description":"Something isn't working"},{"id":1447912553,"node_id":"MDU6TGFiZWwxNDQ3OTEyNTUz","url":"https://api.github.com/repos/AbsaOSS/enceladus/labels/priority:%20high","name":"priority: high","color":"ff0000","default":false,"description":"Critical to the health of the project"}],"state":"closed","locked":false,"assignee":{"login":"GeorgiChochov","id":20905867,"node_id":"MDQ6VXNlcjIwOTA1ODY3","avatar_url":"https://avatars3.githubusercontent.com/u/20905867?v=4","gravatar_id":"","url":"https://api.github.com/users/GeorgiChochov","html_url":"https://github.com/GeorgiChochov","followers_url":"https://api.github.com/users/GeorgiChochov/followers","following_url":"https://api.github.com/users/GeorgiChochov/following{/other_user}","gists_url":"https://api.github.com/users/GeorgiChochov/gists{/gist_id}","starred_url":"https://api.github.com/users/GeorgiChochov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GeorgiChochov/subscriptions","organizations_url":"https://api.github.com/users/GeorgiChochov/orgs","repos_url":"https://api.github.com/users/GeorgiChochov/repos","events_url":"https://api.github.com/users/GeorgiChochov/events{/privacy}","received_events_url":"https://api.github.com/users/GeorgiChochov/received_events","type":"User","site_admin":false},"assignees":[{"login":"GeorgiChochov","id":20905867,"node_id":"MDQ6VXNlcjIwOTA1ODY3","avatar_url":"https://avatars3.githubusercontent.com/u/20905867?v=4","gravatar_id":"","url":"https://api.github.com/users/GeorgiChochov","html_url":"https://github.com/GeorgiChochov","followers_url":"https://api.github.com/users/GeorgiChochov/followers","following_url":"https://api.github.com/users/GeorgiChochov/following{/other_user}","gists_url":"https://api.github.com/users/GeorgiChochov/gists{/gist_id}","starred_url":"https://api.github.com/users/GeorgiChochov/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/GeorgiChochov/subscriptions","organizations_url":"https://api.github.com/users/GeorgiChochov/orgs","repos_url":"https://api.github.com/users/GeorgiChochov/repos","events_url":"https://api.github.com/users/GeorgiChochov/events{/privacy}","received_events_url":"https://api.github.com/users/GeorgiChochov/received_events","type":"User","site_admin":false}],"milestone":null,"comments":1,"created_at":"2020-01-03T10:32:22Z","updated_at":"2020-01-06T09:45:09Z","closed_at":"2020-01-06T09:45:09Z","author_association":"CONTRIBUTOR","body":"## Describe the bug\r\nSPNEGO requests to Menas (via cur --negotiate) are treated as replay attacks since we introduced stateless session management in `v1.6.0`. This is because when handling async requests the security filter chain is run through once before the controller action is executed and a second time when the controller's callback is executed. Each time the SPNEGO filter passes the same token for authentication to the KDC, which causes the second attempt to be treated as a replay attack.\r\n\r\n## To Reproduce\r\nSteps to reproduce the behavior OR commands run:\r\n1. `kinit`\r\n2. `curl -v --negotiate -u : <menas_url>/api/dataset/detail/<dataset_name>/<dataset_version>`\r\n3. Client receives `200 OK` request with an empty body\r\n4. Server logs a Kerberos replay attempt\r\n\r\n## Expected behaviour\r\nSPNEGO requests should work in `v1.6.x` the same way they worked in `v1.5.x` and before.\r\n\r\n## Desktop (please complete the following information):\r\n - Version 1.6.0\r\n\r\n"}}
{"actor":{"display_login":"GeorgiChochov"}}