OpenId Exception: Multiple parameters with the same name [cancle, id_res]

Issue #2465 open
Stephan Doerfel created an issue

There are several exceptions like:

#!

[2015-04-02 09:30:53,918] [ERROR] [org.bibsonomy.webapp.filters.ContextPathFilter] - Error during filter execution. ?openID=https://www.google.com/accounts/o8/id&selTab=0&rememberMe=on?rememberMe%3Don&openid
.mode=cancel&openid.ns=http://specs.openid.net/auth/2.0?rememberMe%3Don?rememberMe%3Don&openid.ns=http%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0&openid.mode=id_res&openid.op_endpoint=https%3A%2F%2Fwww.google.com
%2Faccounts%2Fo8%2Fud&openid.response_nonce=2015-04-02T07%3A30%3A52Zhy3WLCgv8yryBQ&openid.return_to=http%3A%2F%2Fwww.bibsonomy.org%2Flogin_openid%3FopenID%3Dhttps%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%
26selTab%3D0%26rememberMe%3Don%3FrememberMe%253Don%26openid.mode%3Dcancel%26openid.ns%3Dhttp%3A%2F%2Fspecs.openid.net%2Fauth%2F2.0%3FrememberMe%253Don%3FrememberMe%253Don&openid.assoc_handle=1.AMlYA9WJhY3uOF
GCUR0ym5tZN0lA1JUN5jnTI-Lw34NuVmqsw7Y-SU91F6juHPAu6wZhL6HUd33PAw&openid.signed=op_endpoint%2Cclaimed_id%2Cidentity%2Creturn_to%2Cresponse_nonce%2Cassoc_handle%2Cns.ext1%2Cext1.mode%2Cext1.type.email%2Cext1.v
alue.email&openid.sig=fP8%2FbARUeKJoGta3QHd4muqqA8NqT8HGSeeOAp9WOq8%3D&openid.identity=https%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawnLNV3Fcxv-91odRq83KRd2Kf_3y8m066A&openid.claimed_id=https
%3A%2F%2Fwww.google.com%2Faccounts%2Fo8%2Fid%3Fid%3DAItOawnLNV3Fcxv-91odRq83KRd2Kf_3y8m066A&openid.ns.ext1=http%3A%2F%2Fopenid.net%2Fsrv%2Fax%2F1.0&openid.ext1.mode=fetch_response&openid.ext1.type.email=http
%3A%2F%2Fschema.openid.net%2Fcontact%2Femail&openid.ext1.value.email=anonym%40gmail.com with referer null
java.lang.IllegalArgumentException: Multiple parameters with the same name: [cancel, id_res]
        at org.openid4java.message.ParameterList.<init>(ParameterList.java:65)
        at org.springframework.security.openid.OpenID4JavaConsumer.endConsumption(OpenID4JavaConsumer.java:143)
        at org.springframework.security.openid.OpenIDAuthenticationFilter.attemptAuthentication(OpenIDAuthenticationFilter.java:143)
        at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:195)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
        at org.springframework.security.web.authentication.AbstractAuthenticationProcessingFilter.doFilter(AbstractAuthenticationProcessingFilter.java:183)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
        at org.springframework.security.web.authentication.logout.LogoutFilter.doFilter(LogoutFilter.java:105)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
        at org.springframework.security.web.context.SecurityContextPersistenceFilter.doFilter(SecurityContextPersistenceFilter.java:87)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
        at org.bibsonomy.webapp.util.spring.filter.DummyFilter.doFilter(DummyFilter.java:51)
        at org.springframework.security.web.FilterChainProxy$VirtualFilterChain.doFilter(FilterChainProxy.java:342)
        at org.springframework.security.web.FilterChainProxy.doFilterInternal(FilterChainProxy.java:192)
        at org.springframework.security.web.FilterChainProxy.doFilter(FilterChainProxy.java:160)
        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
        at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at org.bibsonomy.webapp.filters.ContentNegotiationFilter.doFilter(ContentNegotiationFilter.java:175)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at org.bibsonomy.webapp.filters.ContextPathFilter.doFilter(ContextPathFilter.java:270)
        at org.springframework.web.filter.DelegatingFilterProxy.invokeDelegate(DelegatingFilterProxy.java:346)
        at org.springframework.web.filter.DelegatingFilterProxy.doFilter(DelegatingFilterProxy.java:259)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at org.springframework.web.filter.CharacterEncodingFilter.doFilterInternal(CharacterEncodingFilter.java:88)
        at org.springframework.web.filter.OncePerRequestFilter.doFilter(OncePerRequestFilter.java:76)
        at org.apache.catalina.core.ApplicationFilterChain.internalDoFilter(ApplicationFilterChain.java:241)
        at org.apache.catalina.core.ApplicationFilterChain.doFilter(ApplicationFilterChain.java:208)
        at org.apache.catalina.core.StandardWrapperValve.invoke(StandardWrapperValve.java:220)
        at org.apache.catalina.core.StandardContextValve.invoke(StandardContextValve.java:122)
        at org.apache.catalina.authenticator.AuthenticatorBase.invoke(AuthenticatorBase.java:501)
        at org.apache.catalina.core.StandardHostValve.invoke(StandardHostValve.java:171)
        at org.apache.catalina.valves.ErrorReportValve.invoke(ErrorReportValve.java:103)
        at org.apache.catalina.valves.AccessLogValve.invoke(AccessLogValve.java:950)
        at org.apache.catalina.core.StandardEngineValve.invoke(StandardEngineValve.java:116)
        at org.apache.catalina.connector.CoyoteAdapter.service(CoyoteAdapter.java:408)
        at org.apache.coyote.http11.AbstractHttp11Processor.process(AbstractHttp11Processor.java:1070)
        at org.apache.coyote.AbstractProtocol$AbstractConnectionHandler.process(AbstractProtocol.java:611)
        at org.apache.tomcat.util.net.JIoEndpoint$SocketProcessor.run(JIoEndpoint.java:316)
        at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1145)
        at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
        at org.apache.tomcat.util.threads.TaskThread$WrappingRunnable.run(TaskThread.java:61)
        at java.lang.Thread.run(Thread.java:724)

Comments (7)

  1. Thomas Niebler

    The problem occurred because there were multiple ?s in the URL. I solved that issue by just changing the form submission method to POST.

  2. Daniel Zoller
    • changed status to open

    @thoni: Have you checked what spring security is doing, why are multiple parameters send back to the openid consumer?

  3. Log in to comment