hybris 5.3.0.2 upgrade hac error

[Former Member]

After upgrading from hybris 5.3.0.0 to 5.3.0.2, I can no longer acces the admin console (hac):

 org.springframework.web.util.NestedServletException: Request processing failed; nested exception is org.springframework.beans.factory.BeanNotOfRequiredTypeException: Bean named 'requestDataValueProcessor' must be of type [org.springframework.web.servlet.support.RequestDataValueProcessor], but was actually of type [org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor]

Probably related to https://answers.sap.com/questions/12751185/after-migrating-to-hybris-5204-admin-console-throw.html

[Former Member]

Commenting out the csrf tag in spring-security-config.xml resolves this, but I don't know if this is the preferred solution.

[Former Member · Accepted solution]

A possible solution is searching and deleting **spring-webmvc-.jar* jars in normal lib folders (not webroot/...).

[Former Member · Accepted solution]

Thanks, the culprit was 'spring-webmvc-3.2.8.RELEASE.jar' in the lib folder of an addon.

[Former Member · Accepted solution]

i had the same issue since 2 days... removing the jar from./lib resolves the prob thanks!

[Former Member]

I was wondering why not such a important thing is documented in WIKI . A lot of customers and partners are having problem when they now try to migrate from older versions to new version. In some cases this is causing a big problem since you cannot access even HAC, resulting in business failure which is unacceptable. Also I can see only folks wrote like a workaround or like possible solution. I would also like to know what is the standard official solution for such a issue.

[Former Member]

Standard, official solution for versions up-to 5.5 (not released yet) is (as I said) to move any Spring Webmvc libraries from lib to web/webroot/WEB-INF/lib.

Starting from upcoming version 5.5.1 we'll ship Spring 4 and what's more Spring Webmvc is a part of core platform so extensions which are using Webmvc must remove this library completely. But as I said 5.5.1 is not released yet.

[Former Member]

I have the same issue, but I can't find a webmvc.jar within any /lib folder. We are using hybris 5.4.0.0. While searching for the class org.springframework.security.web.servlet.support.csrf.CsrfRequestDataValueProcessor I found a \bin\platform\ext\core\lib\spring-security-web-3.2.3.RELEASE.jar. Could that jar file be the problem?

[Former Member]

This issue is caused by /hybris/bin/ext-addon/secureportaladdon/lib/spring-webmvc-3.1.4.RELEASE.jar which must be put in the web lib folder. Although a simple workaround is existing we addressed this issue here https://jira.hybris.com/browse/ECP-219

Sorry for any inconvenience caused.

[Former Member]

Thanks for the info, seems that it should be fixed in 5.4 according to the JIRA ticket.

[Former Member]

Yes, it is fixed for 5.4 and the upcoming patch release 5.3.0.3.

[Former Member]

There was a security issue within a hac regarding CRSF. We had to update configuration to use builtin CRSF protection in Spring Security, thus you can have a problems when you put spring mvc jars in the global classpath. It's generally bad idea to put spring mvc related stuff in other place than web lib folder

[former_member66948]

Hi Hlawski,

I am in version 6.3 facing the same error. spring-webmvc-4.3.3.RELEASE.jar are located at bin\platform\ext\core\lib\ where is core part of the platform. which web lib folder i should move it to?

thanks in advance.

[Former Member]

HI
Is this issue resolved? I am also facing the same issue.

Thanks in advance