SSO Auth Doesn't Work for Endpoints

Stratos Version

4.2.0

Frontend Deployment type

• Cloud Foundry Application (cf push)
• Kubernetes, using a helm chart
• Docker, single container deploying all components
• npm run start
• Other (please specify below)

Backend (Jet Stream) Deployment type

• Cloud Foundry Application (cf push)
• Kubernetes, using a helm chart
• Docker, single container deploying all components
• Other (please specify below)

Expected behaviour

Performing SSO auth to a CF endpoint should redirect to the SSO token page.

Actual behaviour

The frontend returns a 405 Method Not Allowed.

Steps to reproduce the behavior

1. Configure an SSO login with Stratos for a Cloud Foundry endpoint.
2. Attempt to connect to the endpoint using SSO

Log output covering before error and any error statements

Insert log hereCopy

Additional notes

Jetstream listens for SSO auth as of the latest version at GET /pp/v1/auth/tokens, but the frontend attempts to reach it on GET /api/v1/tokens. This gets picked up by the non-SSO auth handler, which only responds to POST methods, hence the 405 error code response from the routing library. Unsure if by design that the backend or frontend path is correct, so I’ve held off on a PR, but the fix depends on the two agreeing on the path.

[richard-cox]

4.2.1 has now been released

[richard-cox]

Fixed via #4719. This will be in the 4.2.1 release which should be out this week.