j_security_check is giving j_username and j_password does not match error | Community
Skip to main content
sravs
Community Advisor
Community Advisor
July 28, 2023
Solved

j_security_check is giving j_username and j_password does not match error

  • July 28, 2023
  • 1 reply
  • 1189 views

we are using Aem 6.5.16, we have login implementation using an OOTB authentication handler.

We are able to login from the publisher instance but not through the dispatcher. We can see that the login-token cookie is getting set on the publisher, not in the dispatcher. we have allowed all the required configurations at the dispatcher level. 

 

Please suggest.

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by Nishant-Singh

1. check if you are caching request headers.

2. check if you are ignoring the query param.

3. check if you are using /sessionmanagement

1 reply

Nishant-Singh
Adobe Employee
Adobe Employee
July 28, 2023

The /clientheaders property defines a list of HTTP headers that Dispatcher passes from the client HTTP request to the renderer (AEM instance).

By default Dispatcher forwards the standard HTTP headers to the AEM instance.

you can configure this like -

/clientheaders
{
"CSRF-Token"
"X-Forwarded-Proto"
"referer"
"user-agent"
"authorization"
"from"
"content-type"
"content-length"
"accept-charset"
"accept-encoding"
"accept-language"
"accept"
"host"
"if-match"
"if-none-match"
"if-range"
"if-unmodified-since"
"max-forwards"
"proxy-authorization"
"proxy-connection"
"range"
"cookie"
"cq-action"
"cq-handle"
"handle"
"action"
"cqstats"
"depth"
"translate"
"expires"
"date"
"dav"
"ms-author-via"
"if"
"lock-token"
"x-expected-entity-length"
"destination"
"PATH"
}

sravs
Community Advisor
sravsCommunity AdvisorAuthor
Community Advisor
July 28, 2023

@nishant-singh This configuration is already in place.

Nishant-Singh
Adobe Employee
Nishant-SinghAdobe EmployeeAccepted solution
Adobe Employee
July 28, 2023

1. check if you are caching request headers.

2. check if you are ignoring the query param.

3. check if you are using /sessionmanagement