Description

The application start might be interrupted by StackOverflowException when using OWIN authentication and the number of sites is over several hundred. These can be sites defined in the Sitecore configuration as well as SXA sites. The root cause of the issue is the faulty behavior of the processor that triggers the Single Sign-Out functionality, namely the LogoutEndpoint processor.

Solution

Consider one of the following options:

• To resolve the issue, upgrade a Sitecore XP instance to Sitecore XP 10.3.0.
• To prevent the issue, consider one of the following options:
  • If you do not use the affected functionality, disable the Sitecore.Owin.Authentication.IdentityServer.Pipelines.Initialize.LogoutEndpoint processor by creating a configuration patch file in the \App_Config\Include\zzz folder:

    <?xml version="1.0" encoding="utf-8"?>
    <configuration xmlns:patch="http://www.sitecore.net/xmlconfig/" xmlns:role="http://www.sitecore.net/xmlconfig/role/">
      <sitecore role:require="Standalone or ContentDelivery or ContentManagement">
        <pipelines>
          <owin.initialize>
            <processor type="Sitecore.Owin.Authentication.IdentityServer.Pipelines.Initialize.LogoutEndpoint, Sitecore.Owin.Authentication.IdentityServer">
    	  <patch:delete />
            </processor>
          </owin.initialize>
        </pipelines>
      </sitecore>
    </configuration>

  • If you use the Single Sign-Out functionality, customize the LogoutEndpoint processor:
    
    1. Create four custom classes:
       
       • IAppBuilderExtensions.cs
       • LogoutEndpoint.cs
       • MapMiddlewareEx.cs
       • ShowUserAuthType.cs
       Note: The code samples are given only as a starting point.
    2. Build the created four classes into an assembly.
    3. Put the assembly to the \bin folder of the website.
    4. Reference the classes from the configuration by creating a configuration patch file in the \App_Config\Include\zzz folder:

       <?xml version="1.0" encoding="utf-8"?>
       <configuration xmlns:patch="http://www.sitecore.net/xmlconfig/" xmlns:role="http://www.sitecore.net/xmlconfig/role/" xmlns:set="http://www.sitecore.net/xmlconfig/set/">
           <sitecore role:require="Standalone or ContentDelivery or ContentManagement">
               <pipelines>
                   <owin.initialize>
                       <processor type="Custom.Owin.Authentication.IdentityServer.Pipelines.Initialize.LogoutEndpoint, Custom.Assembly" resolve="true"
                                  patch:instead="*[@type='Sitecore.Owin.Authentication.IdentityServer.Pipelines.Initialize.LogoutEndpoint, Sitecore.Owin.Authentication.IdentityServer']" />
                       <processor type="Custom.Owin.Authentication.Samples.Pipelines.Initialize.ShowUserAuthType, Custom.Assembly" resolve="true"
                                  patch:instead="*[@type='Sitecore.Owin.Authentication.Samples.Pipelines.Initialize.ShowUserAuthType, Sitecore.Owin.Authentication.Samples']" />
                   </owin.initialize>
               </pipelines>
           </sitecore>
       </configuration>