Filter Chain Changes Not Saving

KroniK907 · March 24, 2025, 9:48pm

Hello,

I am working on trying to get HTTP Header authentication working and as a part of that I need to adjust the default filter chain to use the new proxy authentication filter I set up using the tutorial in the docs here: Configuring HTTP Header Proxy Authentication — GeoServer 2.26.x User Manual

Currently, my problem is that none of the changes I make to any of the filter chains seems to stick. When I click on the “default” filter chain, it shows that the proxy authentication filter is in the left box. I move it over to the right box and move the basic filter to the left box, and then click “Close”. Currently there is no “save” button only “Close” or “Cancel”.

After closing the page if I click on the “default” filter chain again, it still shows my edit. However if I go to a different geoserver page (eg. the server status page) and then go back to the authentication page and click the “default” filter chain, my previous edits are gone.

I can even try creating new filter chain entries, and they will show on the list until the authentication page is reloaded, at which point all my edits are gone.

Here is a screen recording showing this happening: geoserver-issue.mp4 - Google Drive

I’m currently running 2.26.2

Not sure how to start chasing this down, and any advice would be appreciated.

Peter · March 25, 2025, 9:27am

Hi @KroniK907

The documentation is slightly wrong, in that you first need to click “Close” on the Filter Chain page followed by “Save” on the Authentication page.

Would you care to do the kind open-source thing and contribute a fix to the documentation? I can guide you through the process, but it starts with going to the top of Configuring HTTP Header Proxy Authentication — GeoServer 2.26.x User Manual and clicking Edit in the right hand menu which will take you to:

github.com

geoserver/geoserver/blob/main/doc/en/user/source/security/tutorials/httpheaderproxy/index.rst

.. _security_tutorials_httpheaderproxy:

Configuring HTTP Header Proxy Authentication
============================================

Introduction
------------

Proxy authentication is used in multi-tier system. The user/principal authenticates
at the proxy and the proxy provides the authentication information to other services.

This tutorial shows how to configure GeoServer to accept authentication information
passed by HTTP header attribute(s). In this scenario GeoServer will do no actual authentication itself.


Prerequisites
-------------

This tutorial uses the `curl <http://curl.haxx.se/>`_ utility to issue HTTP 
request that test authentication. Install curl before proceeding.

This file has been truncated. show original

Find the icon for Edit this file, …

Peter

KroniK907 · March 25, 2025, 4:18pm

Not gonna lie, I feel pretty dumb for missing this. But to be fair to me, I cant think of any other sub page that requires saving on the parent page.

I have submitted a PR for the docs change.

Peter · March 26, 2025, 9:57am

Thank you very much for your contribution @KroniK907 - we appreciate you taking the time to improve the documentation. PR gratefully accepted.

Peter