Improve logging when DTS rotateKey push fails (HTTP 405 / security key)

[natechadwick-intsof]

Summary

CMS logs HTTP 405 when pushing encryption key rotation to DTS after publish:

ERROR PSDeliveryClient  Error when executing method : HTTP/1.1 405 …
WARN  PSDeliveryInfoService  Unable to push updated security key to DTS server:https://localhost:8443

Call: PUT /feeds/rss/rotateKey on the delivery admin URL (e.g. https://localhost:8443/feeds/rss/rotateKey), body = Base64 secure key, expect 204.

Gaps

• WARN only shows admin base URL, not full path/method/status
• ERROR dumps Tomcat HTML error page
• Non-fatal but keys can desync; operators lack actionable text

Proposed fix

Improve logging (full URL, method, status, short reason + “check feeds app / credentials / availableServices”). Optionally document curl check for 8.1.x operators.

Related

• Main-line sister: Improve logging when DTS rotateKey push fails (HTTP 405 / security key) percussioncms#2354
• Endpoint: PSFeedService.rotateKey (@PUT)

[vijaya-boddipudi]

QA results (2026-08-26)

• QA: Blocked
• Environment: http://localhost:9992 → install D:\Installs\cms-8.1.7 (jetty.http.port=9992)
• Role tested: Admin
• Screenshots: D:\release_build\tmp\qa-26-08\3\ (01-login.png, 02-explorer-404.png, 03-dashboard-admin.png, 04-dashboard-sites.png)

Scope note

#3 is a DTS rotateKey logging fix (PR #28), not an Explorer UI task. It is not labeled qa task. Acceptance criteria are log/operator diagnostics (sister #2354).

Browser steps vs supplied Application URL

Step	Result
Login as Admin	Pass — classic login accepted
Open /cm/app/explorer	Fail / N/A — Percussion 404 (“This page cannot be found”). That path is the 8.2 SPA Explorer route; this is 8.1.7 / java8.
Classic UI after login	Pass — /cm/app/?view=dash Dashboard loads (“Welcome, Admin”); Sites shows testsite

Acceptance criteria (from issue / PR #28)

Criterion	Result	Evidence
On rotateKey failure, logs show full URL + method + status without multi-KB HTML	Blocked	Runtime perc-system-8.1.7-SNAPSHOT.jar (mtime 2026-06-15) does not contain PSDeliveryHttpErrorSupport (PR #28 merged 2026-08-13). Fix is not deployed to this install.
WARN points operators at feeds deploy / admin URL / credentials	Blocked	Same — cannot observe improved failure WARN. server.log has 0 Unable to push updated security key WARN lines.
Success path unchanged (204 → INFO)	Pass	Repeated INFO: Updated security key pushed to DTS server: https://localhost:8443
Unit tests for helper	N/A (runtime)	Covered in PR #28; not re-executed in this manual pass

Why blocked (not Pass/Fail on the logging fix)

1. Provided Explorer URL is the wrong product surface for 8.1.7.
2. Logging fix is not present in the running CMS jar.
3. Current DTS (https://localhost:8443, GET / → 200, /feeds/ → 302) is succeeding key push — no 405 failure path to re-verify without intentionally breaking feeds/admin.

Re-test when unblocked

1. Hot-deploy / install a build that includes PR fix(system): improve DTS rotateKey failure logging (#3) #28 (PSDeliveryHttpErrorSupport in perc-system).
2. Induce rotateKey failure (e.g. feeds WAR removed / wrong admin path) and confirm WARN includes PUT …/feeds/rss/rotateKey + HTTP status + short reason (no Tomcat HTML dump).
3. Confirm success INFO still fires when DTS returns 204.

[vijaya-boddipudi]

Re-opening since there steps blocked testing