[Bug]: Shared Services HTTPD Server sometimes returns Bad Request

[anilnatha]

Checked for duplicates

Have you checked for duplicate issue tickets?

Yes - I've already checked, but didn't find anything.

Describe the bug

When navigating to a URL in a venue, e.g. https://www.dev.mdps.mcp.nasa.gov:4443/unity/dev/ui

An error response of Bad Request is returned, see screenshot. At the bottom of the response, the shared services httpd server appears to be the responding server which is why I'm adding a ticket to this repo.

What did you expect?

I expected the server to either 1) ask me to login if my session/token has expired or 2) return the results of what i expect from visiting the service identified after the <project>/<venue>/ in the URL.

Reproducible steps

How would we reproduce this bug? Please walk us through it step by step. Plain-text snippets preferred but screenshots welcome.

I'm unsure of the exact steps to reproduce this behavior, but from what I've observed, if one let's some time go by after successfully logging in, and then later revisits the same URL, this response is given.

I've also observed that clearing cookies in the browser resolves this issue.

What is your environment?

Include any computer hardware, operating system, framework, browser, time-of-day or other contextual information related to your issue

• Operating System: MacOSX
• Browser: Firefox ESR

[jl-0]

Related to proxy issue, similar to ticket unity-sds/unity-project-management#223

[ramesh-maddegoda]

@jl-0 and @anilnatha ,

This looks like a well known issue with mod_auth_openidc that we use for COgnito authentication in HTTPD (Apache 2), as discussed in the following links.

https://discourse.openondemand.org/t/hitting-max-authorized-valid-state-cookies/667/5
OpenIDC/mod_auth_openidc#714

They have fixed this in recent versions and introduced a new property called OIDCStateMaxNumberOfCookies to limit the max number of state cookies. Some developers suggest to use 10 as a fair number of cookies.

However, to make sure if this OIDCStateMaxNumberOfCookies setting is working, I set it to 3 for now in MCP Dev HTTPD as follows.

 # Set max number of state cookies to avoid piling up OIDC state cookies
 OIDCStateMaxNumberOfCookies 3 true

@anilnatha,

• Can you please let me know if you see this issue anymore?
• Also please let me know if setting this value to 3 has any unexpected impacts