fixing intermediate HTML form-post on SSO #124

Author: summitt

WebContent/WEB-INF/web.xml

@@ -9,6 +9,10 @@
 		<filter-name>corsFilter</filter-name>
 		<url-pattern>/oauth/*</url-pattern>
 	</filter-mapping>
+	<filter-mapping>
+		<filter-name>clearSavedRequestFilter</filter-name>
+		<url-pattern>/oauth/*</url-pattern>
+	</filter-mapping>
 	<filter-mapping>
 		<filter-name>callbackFilter</filter-name>
 		<url-pattern>/oauth/callback</url-pattern>
@@ -48,6 +52,11 @@
 		<url-pattern>/saml2/*</url-pattern>
 	</filter-mapping>
 
+	<filter-mapping>
+		<filter-name>clearSavedRequestFilter</filter-name>
+		<url-pattern>/saml2/*</url-pattern>
+	</filter-mapping>
+	
 	<filter-mapping>
 		<filter-name>saml2Callback</filter-name>
 		<url-pattern>/saml2/callback</url-pattern>

src/com/fuse/authentication/oauth/ClearSavedRequestFilter.java

@@ -0,0 +1,30 @@
+package com.fuse.authentication.oauth;
+
+import javax.servlet.*;
+import javax.servlet.annotation.WebFilter;
+import javax.servlet.http.HttpServletRequest;
+import javax.servlet.http.HttpServletResponse;
+import javax.servlet.http.HttpSession;
+
+import org.pac4j.core.util.Pac4jConstants;
+
+import java.io.IOException;
+
+@WebFilter(filterName = "clearSavedRequestFilter")
+public class ClearSavedRequestFilter implements Filter {
+
+    @Override
+    public void doFilter(ServletRequest req, ServletResponse res, FilterChain chain)
+            throws IOException, ServletException {
+
+        HttpServletRequest request = (HttpServletRequest) req;
+        HttpSession session = request.getSession(false);
+
+        if (session != null && request.getRequestURI().contains("/saml2/callback")) {
+            // Remove pac4j's saved original request so it won't form-POST replay it
+            session.removeAttribute(Pac4jConstants.REQUESTED_URL);
+        }
+
+        chain.doFilter(req, res);
+    }
+}