Infinite loop/afrLoop when deploying ADF application to standalone weblogic

Question

Working with Oracle ADF / JDeveloper 11.1.2.2
I have enabled ADF security in my application and am using JAAS combined with Oracle EBS users and roles to provide security to the application. Testing on my local integrated weblogic server works fine.
When deploying my Oracle ADF application to a standalone Weblogic server through an EAR file, requesting a JSF page causes the server to go into an infinite loop on both IE and firefox.
GET /test-app/faces/login.jsf HTTP/1.1     200
GET /test-app/faces/login.jsf?_afrLoop=346001033248597&_afrWindowMode=0&Adf-Window-Id=w0 HTTP/1.1     302
GET /test-app/adfAuthentication HTTP/1.1     302
GET /test-app/faces/login.jsf HTTP/1.1     200
GET /test-app/faces/login.jsf?_afrLoop=346001340281597&_afrWindowMode=0&Adf-Window-Id=w0 HTTP/1.1     302
GET /test-app/adfAuthentication HTTP/1.1     302
GET /test-app/faces/login.jsf;jsessionid=syWvP1nMY1L87BySh2JbTd1tb4SY0HzDw6T3LvLctvkbMWKmqqJv!1800986117 HTTP/1.1     200
GET /test-app/adfAuthentication HTTP/1.1
Reviewing some of the suggestions from the forum and from the link below, I have tried fixing the issue through updates to my web.xml - but am still having the same issue.
https://blogs.oracle.com/jdevotnharvest/entry/solving_jdeveloper_11gr2_issue_with
Updated web.xml:
<security-constraint>
<web-resource-collection>
<web-resource-name>Allowed ADF Resources</web-resource-name>
<url-pattern>/adf/*</url-pattern>
<url-pattern>/afr/*</url-pattern>
<url-pattern>/bi/*</url-pattern>
<url-pattern>/servlet/GraphServlet/*</url-pattern>
<url-pattern>/servlet/GaugeServlet/*</url-pattern>
<url-pattern>/mapproxy/*</url-pattern>
<url-pattern>/adflib/</url-pattern>
</web-resource-collection>
<web-resource-collection>
<web-resource-name>allPages</web-resource-name>
<url-pattern>/*</url-pattern>
</web-resource-collection>
<web-resource-collection>
<web-resource-name>adfAuthentication</web-resource-name>
<url-pattern>/adfAuthentication</url-pattern>
</web-resource-collection>
<auth-constraint>
<role-name>valid-users</role-name>
</auth-constraint>
</security-constraint>
<login-config>
<auth-method>FORM</auth-method>
<form-login-config>
<form-login-page>/faces/login.jsf</form-login-page>
<form-error-page>/faces/login-error.jsf</form-error-page>
</form-login-config>
</login-config>
<security-role>
<role-name>valid-users</role-name>
</security-role>
weblogic.xml
<security-role-assignment>
<role-name>valid-users</role-name>
<principal-name>users</principal-name>
</security-role-assignment>
I know other users have experienced similar issues - but I am having trouble debugging or troubleshooting why this is happening.
Any suggestions on how to further troubleshoot or resolve this issue would be appreciated!
Dan

Answer 1

I was able to resolve the login page looping issue.
The issue is related to the login page being a JSF page based on a page template.
When I created the JSF login page as a page template - the template contains a binding:
<af:pageTemplate viewId="/test-template.jsf" value="#{bindings.ptb1}" id="pt1">
When I deploy my application to the test weblogic server, the anonymous-role grants are not being respected. So even though I grant view access to the login JSF page to anonymous-role -- it appears that weblogic is trying to request a login for any page with a pageDef (including the login page). By re-creating the login page with no pageDef (a JSF page that does not use a page template) -- the login page is displayed (rather than entering into a loop).
There is still a seperate issue with the anonymous-role grant not working as I would expect it to work that I will need to troubleshoot further.