Trying to log into TIBCO JasperReports®​​​​​​​ Server with Token based authentication redirects to the login page

Issue description

When trying to pass user token and other relevant parameters via URL, the application redirects to the login.html page instead of actually logging in. Here is an example URL:

https://myhost:8443/jasperserver-pro/flow.html?_flowId=searchFlow&mode=search&filterId=myFIlterID&filterOption=myFilterOption&pp=u%3DmyUser+o%3DmyOrganization+exp%3D20170119184304

Troubleshooting

The most common reason of being redirected to the login page is authentication being denied because of incorrect parameter values, or because the timestamp provided from 'exp' parameter is already in the past. So that's the first thing you want to check.

If the values are correct, next good step is to enable debug on entire spring security. In JasperReports® Server repository interface, add the following property under Manage->Server Settings->Log settings and set it to DEBUG:

org.springframework.security

Then try logging in again, and then check the /WEB-INF/logs/jasperserver.log file for any errors or other related messages. One example of a DEBUG message you may discover is this:

DEBUG ExceptionTranslationFilter,http-nio-8443-exec-9:165 - Access is denied (user is anonymous); redirecting to authentication entry point

org.springframework.security.access.AccessDeniedException: Access is denied

For example in the case above the issue was that the separator sign in URL had to be encoded. E.g. instead of '+' separator symbol we had to put '%2B', like this:

https://<host>:8443/jasperserver-pro?pp=u=myUser%2Bo=myOrganization

Ref. case #01447230