{"action":"created","issue":{"url":"https://api.github.com/repos/GluuFederation/oxTrust/issues/94","labels_url":"https://api.github.com/repos/GluuFederation/oxTrust/issues/94/labels{/name}","comments_url":"https://api.github.com/repos/GluuFederation/oxTrust/issues/94/comments","events_url":"https://api.github.com/repos/GluuFederation/oxTrust/issues/94/events","html_url":"https://github.com/GluuFederation/oxTrust/issues/94","id":98856548,"number":94,"title":"Uploading picture through \"Picture URL\" attribute prevents user from logging in to web UI","user":{"login":"aliaksander-samuseu","id":11802046,"avatar_url":"https://avatars.githubusercontent.com/u/11802046?v=3","gravatar_id":"","url":"https://api.github.com/users/aliaksander-samuseu","html_url":"https://github.com/aliaksander-samuseu","followers_url":"https://api.github.com/users/aliaksander-samuseu/followers","following_url":"https://api.github.com/users/aliaksander-samuseu/following{/other_user}","gists_url":"https://api.github.com/users/aliaksander-samuseu/gists{/gist_id}","starred_url":"https://api.github.com/users/aliaksander-samuseu/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/aliaksander-samuseu/subscriptions","organizations_url":"https://api.github.com/users/aliaksander-samuseu/orgs","repos_url":"https://api.github.com/users/aliaksander-samuseu/repos","events_url":"https://api.github.com/users/aliaksander-samuseu/events{/privacy}","received_events_url":"https://api.github.com/users/aliaksander-samuseu/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/GluuFederation/oxTrust/labels/bug","name":"bug","color":"fc2929"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":0,"created_at":"2015-08-03T23:29:12Z","updated_at":"2015-08-12T12:01:27Z","closed_at":null,"body":"Environment:\r\nUbuntu x64 14.04.1 on VmWare Workstation 11.1.0 build-2496824, Gluu CE 2.3.1-2\r\n\r\nPreconditions:\r\n1) Fresh installation of Gluu CE\r\n2) New regular user account created just for this test\r\n3) Feature \"User Can Edit Own Profile\" on the \"Configuration->Organization Configuration\" page is enabled\r\n4) Authentication against internal LDAP database is used (though it was confirmed that issue can be reproduced for CR-created accounts authenticating against back-end LDAP)\r\n\r\nSteps to reproduce:\r\n1) Log in to oxTrust web UI as a regular user (not a member of Gluu Manager Group) that was created for this test\r\n2) Move to \"Personal\" -> \"Profile\" page\r\n3) Attach \"Picture URL\" attribute to your user\r\n4) Using controls provided by attached attribute add any picture to the user account and click \"Update\" button\r\n5) Log out and try to log in again with this user\r\n\r\nResult:\r\nLogging in process can't be completed. Empty page is returned and next error messages appear in the wrapper.log (you can find complete logs related to failed login attempt here: http://pastebin.com/4fNNtFzU):\r\norg.apache.coyote.ajp.AjpProcessor process\r\nSEVERE: Error processing request\r\njava.lang.ArrayIndexOutOfBoundsException\r\n\r\nThe last url from the browser's address bar:\r\nhttps://idp.gluu.org/oxauth/seam/resource/restv1/oxauth/authorize?response_type=code+id_token&scope=openid+profile+email+user_name&redirect_uri=https%3A%2F%2Fidp.gluu.org%2Fidentity%2Fauthentication%2Fauthcode&nonce=nonce&client_id=%40!73A0.15C2.270C.31F5!0008!3105.58B0&cid=149\r\n\r\nFrom now on user isn't able to log into oxTrust with this account until the attribute is cleared of value assigned to it by picture uploading feature from before. Issue affects admin accounts too, and also accounts created by CR. To get access to the login page again flush all session related cookies from your browser cache - now you should be able to login as admin user and remove affected test user account, or assign its \"Picture URL\" attribute some bogus value  (string of random character will do) - as you can't currently remove the attribute itself, due to the issue #96\r\nAlso note how unsightly the content of this attribute looks when viewed in the user's editor of the \"Users->Manage people\" page. See attached screenshot for details.\r\n\r\n![picture-prevents-login](https://cloud.githubusercontent.com/assets/11802046/9049935/5d8eac82-3a50-11e5-9105-c98ffef7ab7e.png)\r\n"},"comment":{"url":"https://api.github.com/repos/GluuFederation/oxTrust/issues/comments/130273256","html_url":"https://github.com/GluuFederation/oxTrust/issues/94#issuecomment-130273256","issue_url":"https://api.github.com/repos/GluuFederation/oxTrust/issues/94","id":130273256,"user":{"login":"mzico","id":7156097,"avatar_url":"https://avatars.githubusercontent.com/u/7156097?v=3","gravatar_id":"","url":"https://api.github.com/users/mzico","html_url":"https://github.com/mzico","followers_url":"https://api.github.com/users/mzico/followers","following_url":"https://api.github.com/users/mzico/following{/other_user}","gists_url":"https://api.github.com/users/mzico/gists{/gist_id}","starred_url":"https://api.github.com/users/mzico/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/mzico/subscriptions","organizations_url":"https://api.github.com/users/mzico/orgs","repos_url":"https://api.github.com/users/mzico/repos","events_url":"https://api.github.com/users/mzico/events{/privacy}","received_events_url":"https://api.github.com/users/mzico/received_events","type":"User","site_admin":false},"created_at":"2015-08-12T12:01:27Z","updated_at":"2015-08-12T12:01:27Z","body":"Bug persist there in 2.3.2. No specific indication of error in log. \r\nHere are couple of last lines from oxauth.log: \r\n\r\n    2015-08-12 11:58:41,612 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!468E.50EC.FF5C.BCDC!0001!1705.F84C!0005!BE64,ou=attributes,o=@!468E.50EC.FF5C.BCDC!0001!1705.F84C,o=gluu'\r\n    2015-08-12 11:58:41,613 TRACE [org.xdi.oxauth.service.AttributeService] Get attribute from cache by Dn 'inum=@!468E.50EC.FF5C.BCDC!0001!1705.F84C!0005!6493,ou=attributes,o=@!468E.50EC.FF5C.BCDC!0001!1705.F84C,o=gluu'\r\n    2015-08-12 11:58:41,669 DEBUG [org.xdi.oxauth.model.authorize.ScopeChecker] Checking scopes policy for: openid profile email user_name\r\n    2015-08-12 11:58:41,714 DEBUG [org.xdi.oxauth.model.authorize.ScopeChecker] Granted scopes: [user_name, email, openid, profile]"}}