Known issues
The following important issues remained open at the time of the latest release for each version:
IG 2024.3
| Issue | Comment |
|---|---|
OPENIG-7296: In Studio, switch deploy status in route makes it out of sync |
Unresolved |
OPENIG-6775: In Studio, route picked up by IG can’t be undeployed |
Unresolved |
IG 2023.11
| Issue | Comment |
|---|---|
OPENIG-7736: IG drops some bytes during POST and PUT of large data/images |
Fixed in 2024.3 |
OPENIG-7680: GzipFlowableTransformer fails when there is empty bytebuffer after actual gzip content |
Fixed in 2024.3 |
OPENIG-7296: Switch deploy status in route makes it out of sync |
Unresolved |
OPENIG-6775: Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-4817: Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 2023.9
| Issue | Comment |
|---|---|
OPENIG-7736: IG drops some bytes during POST and PUT of large data/images |
Fixed in 2024.3 |
OPENIG-7680: GzipFlowableTransformer fails when there is empty bytebuffer after actual gzip content |
Fixed in 2024.3 |
OPENIG-7296: Switch deploy status in route makes it out of sync |
Unresolved |
OPENIG-6775: Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-4817: Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 2023.6
| Issue | Comment |
|---|---|
OPENIG-7736: IG drops some bytes during POST and PUT of large data/images |
Fixed in 2024.3 |
OPENIG-7680: GzipFlowableTransformer fails when there is empty bytebuffer after actual gzip content |
Fixed in 2024.3 |
OPENIG-7296: Switch deploy status in route makes it out of sync |
Unresolved |
OPENIG-6775: Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-5294: Clear Issuer cache on exception |
Fixed in 2023.9 |
OPENIG-4817: Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 2023.4
| Issue | Comment |
|---|---|
OPENIG-7429: IG cannot handle requests with IPv6 URL |
Fixed in 2023.6 |
OPENIG-7296: Switch deploy status in route makes it out of sync |
Unresolved |
OPENIG-6775: Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-5294: Clear Issuer cache on exception |
Fixed in 2023.9 |
OPENIG-4817: Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 2023.2
| Issue | Comment |
|---|---|
OPENIG-6775: Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-5913 (UI) Route configuration lost sometime after un-deploy from route list |
Fixed in 2023.4 |
OPENIG-5294: Clear Issuer cache on exception |
Fixed in 2023.9 |
OPENIG-4817: Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 7.2.0
| Issue | Comment |
|---|---|
OPENIG-6775: Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-5913 (UI) Route configuration lost sometime after un-deploy from route list |
Fixed in 2023.4 |
OPENIG-5294: Clear Issuer cache on exception |
Fixed in 2023.9 |
OPENIG-4817 Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 7.1.2
| Issue | Comment |
|---|---|
OPENIG-6911 Failed agent authentication is not clear from the IG logs |
Fixed in 2023.2 |
OPENIG-6775 Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-5913 (UI) Route configuration lost sometime after un-deploy from route list |
Fixed in 2023.4 |
OPENIG-5725 Add SNI configuration |
Fixed in 7.2.0 |
OPENIG-5425 JwkSetHandler: No error displayed when using an invalid configuration such as a public key exported -as jwk- for decryption usage |
Fixed in 7.2.0 |
OPENIG-5294: Clear Issuer cache on exception |
Fixed in 2023.9 |
OPENIG-4817 Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 7.0.2
| Issue | Comment |
|---|---|
OPENIG-6206 When checking for peer certificates in a request, validate that the SSLSession is available |
Fixed in 7.1.2, 7.2.0 |
OPENIG-5913 (UI) Route configuration lost sometime after un-deploy from route list |
Fixed in 2023.4 |
OPENIG-5793 Unexpected behaviour of EL function matches |
Fixed in 7.1.2, 7.2.0 |
OPENIG-5610 Null Pointer Exception when using ForwardedRequestFilter with ResourceHandler |
Fixed in 7.1.1, 7.2.0 |
OPENIG-5294: Clear Issuer cache on exception |
Fixed in 2023.9 |
OPENIG-4956 Inbound WebSocket connection is not closed when outbound connection is closed abruptly |
Fixed in 7.1.1, 7.2.0 |
OPENIG-4817 Can’t specify any host information for HTTP/2 request |
Unresolved |
IG 6.5.4
| Issue | Comment |
|---|---|
OPENIG-6775 Route picked up by IG cannot be undeployed |
Unresolved |
OPENIG-5793 Unexpected behaviour of EL function matches |
Fixed in 7.1.2, 7.2.0 |
OPENIG-4956 Inbound WebSocket connection is not closed when outbound connection is closed abruptly |
Fixed in 7.1.1, 7.2.0 |
OPENIG-3821 ResourceHandler should create redirect to a relative URI when requests don’t end in / |
Fixed in 7.0.0 |
OPENIG-3755 IG’s decodeBase64 function returns null on JWTs generated by IG or AM |
Fixed in 7.0.0 |
OPENIG-3579 NullPointerException when calling org.forgerock.openig.handler.router.DirectoryMonitor#createFileChangeSet |
7.0.0 |
OPENIG-3488 IG fails to stop when started with a config.json with invalid json syntax. |
7.0.0 |
OPENIG-3275 SamlFederationHandler Doesn’t Support Filtering |
Fixed in 7.0.0 |
OPENIG-3248 IG fails to proxy websocket messages when running with Jetty |
Won’t fix |
OPENIG-3221 OpenIG is decoding special character ' while sending to the backend which is causing issues |
7.0.0 |
OPENIG-2919 Roles attribute not returned in UserProfileFilter when username is used |
Won’t fix |
OPENIG-2417 Thread starvation on CHF response reception/consumption with async http client |
Won’t fix |
IG 6.1.0
| Issue | Comment |
|---|---|
OPENIG-5793 Unexpected behaviour of EL function matches |
Fixed in 7.1.2, 7.2.0 |
OPENIG-5084 WebSocket connections are not being proxied when baseURI scheme is wss |
Fixed in 6.5.4, 7.0.2, 7.1.0 |
OPENIG-4190 A WebSocket Origin header is missing the scheme from the URL |
Fixed in 6.5.3, 7.0.0 |
OPENIG-3837 WebSocketAdapter#writeBuffersIfStreamIsReady should check if stream is ready before calling flush |
Fixed in 6.5.2, 7.0.0 |
OPENIG-3821 ResourceHandler should create redirect to a relative URI when requests don’t end in / |
Fixed in 7.0.0 |
OPENIG-3819 WebSocket requests should be built using the raw query parameters |
Fixed in 6.5.2, 7.0.0 |
OPENIG-3783 ClassCastException in scriptable access token resolver occurs when invalid token is returned by delegated access token resolver |
Fixed in 6.5.3, 7.0.0 |
OPENIG-3579 NullPointerException when calling org.forgerock.openig.handler.router.DirectoryMonitor#createFileChangeSet |
7.0.0 |
OPENIG-3296 UserProfileFilter and usernames with colons |
Fixed in 6.5.2, 7.0.0 |
OPENIG-3248 IG fails to proxy websocket messages when running with Jetty |
Won’t fix |
OPENIG-3226 StaticFilterRequest: request leak |
Fixed in 5.5.1, 6.5.0 |
OPENIG-3221 OpenIG is decoding special character ' while sending to the backend which is causing issues |
7.0.0 |
OPENIG-3219 When using scan feature in logback.xml the ig.instance.dir property is lost on reload |
Fixed in 5.5.1, 6.5.0, 7.0.0 |
OPENIG-3113 Not possible to use token substitutions within a monitor decorator of a Route |
Fixed in 6.5.0 |
IG 6.0.0
| Issue | Comment |
|---|---|
OPENIG-5793 Unexpected behaviour of EL function matches |
Fixed in 7.1.2, 7.2.0 |
OPENIG-5084 WebSocket connections are not being proxied when baseURI scheme is wss |
Fixed in 6.5.4, 7.0.2, 7.1.0 |
OPENIG-4190 A WebSocket Origin header is missing the scheme from the URL |
Fixed in 6.5.3, 7.0.0 |
OPENIG-3821 ResourceHandler should create redirect to a relative URI when requests don’t end in / |
Fixed in 7.0.0 |
OPENIG-3783 ClassCastException in scriptable access token resolver occurs when invalid token is returned by delegated access token resolver |
Fixed in 6.5.3, 7.0.0 |
OPENIG-3579 NullPointerException when calling org.forgerock.openig.handler.router.DirectoryMonitor#createFileChangeSet |
7.0.0 |
OPENIG-3403 ContentTypeHeader quoted directives should be maintained |
Fixed in 6.5.1, 7.0.0 |
OPENIG-3296 UserProfileFilter and usernames with colons |
Fixed in 6.5.2, 7.0.0 |
OPENIG-3275 SamlFederationHandler Doesn’t Support Filtering |
Fixed in 7.0.0 |
OPENIG-3226 StaticFilterRequest: request leak |
Fixed in 5.5.1, 6.5.0 |
OPENIG-3221 OpenIG is decoding special character ' while sending to the backend which is causing issues |
7.0.0 |
OPENIG-3219 When using scan feature in logback.xml the ig.instance.dir property is lost on reload |
Fixed in 5.5.1, 6.5.0, 7.0.0 |
OPENIG-3113 Not possible to use token substitutions within a monitor decorator of a Route |
Fixed in 6.5.0 |
OPENIG-2695 UI: Unable to open Freeform editor on Linux |
Fixed in 6.1.0 |
OPENIG-2634 UI: Uncaught error on route error |
Fixed in 6.1.0 |
OPENIG-2417 Thread starvation on CHF response reception/consumption with async http client |
Won’t fix |
IG 5.5.2
| Issue | Comment |
|---|---|
OPENIG-3821 ResourceHandler should create redirect to a relative URI when requests don’t end in / |
Fixed in 7.0.0 |
OPENIG-3579 NullPointerException when calling org.forgerock.openig.handler.router.DirectoryMonitor#createFileChangeSet |
7.0.0 |
OPENIG-3403 ContentTypeHeader quoted directives should be maintained |
Fixed in 6.5.1, 7.0.0 |
OPENIG-3275 SamlFederationHandler Doesn’t Support Filtering |
Fixed in 7.0.0 |
OPENIG-3221 OpenIG is decoding special character ' while sending to the backend which is causing issues |
7.0.0 |
OPENIG-2565 PolicyEnforcementFilter returns 403 instead of 401 when route is accessed with an unauthenticated user |
Fixed in 6.0.0 |
OPENIG-1557 UI: Unable to deploy route when custom router is configured |
Classified as a limitation |
OPENIG-1325 Cannot specify realm in UmaService |
Fixed in 6.0.0 |
OPENIG-816 The UmaResourceServerFilter returns with wrong as_uri |
Fixed in 6.0.0 |
OPENIG-813 auditService : fileRotation may overwrite existing audit file |
Classified as a limitation |
OPENIG-234 Federation doesn’t work if we used incomplete user in IDP |
Classified as a limitation |