Happening to us with 5.1.6, using openid connect webflow. Same symptoms, only thing making it interesting is that it does not happen every time.
See threads: https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/TDh7Zz7g5TY -- *Sándor Juhász* System Administrator *ChemAxon* *Ltd*. Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031 Cell: +36704258964 On Mon, Dec 4, 2017 at 11:45 AM, Fei Wang <[email protected]> wrote: > I met the exactly same problem . Have you resolve it ? > > > On Wednesday, September 6, 2017 at 11:13:56 AM UTC+8, Zhang Yu wrote: >> >> env: >> Java 8, CAS 5.1.3, Tomcat 8.5 (standalone), IntelliJ, macOS Sierra. >> >> pom.xml: >> >> <properties> >> <cas.version>5.1.3</cas.version> >> </properties> >> >> <dependencies> >> <dependency> >> <groupId>org.apereo.cas</groupId> >> <artifactId>cas-server-webapp</artifactId> >> <version>${cas.version}</version> >> <type>war</type> >> <scope>runtime</scope> >> </dependency> >> <dependency> >> <groupId>org.apereo.cas</groupId> >> <artifactId>cas-server-support-jdbc</artifactId> >> <version>${cas.version}</version> >> </dependency> >> <dependency> >> <groupId>org.apereo.cas</groupId> >> <artifactId>cas-server-support-json-service-registry</artifactId> >> <version>${cas.version}</version> >> </dependency> >> <dependency> >> <groupId>org.apereo.cas</groupId> >> <artifactId>cas-server-webapp-config-security</artifactId> >> <version>${cas.version}</version> >> </dependency> >> <dependency> >> <groupId>org.apereo.cas</groupId> >> <artifactId>cas-server-support-oauth-webflow</artifactId> >> <version>${cas.version}</version> >> </dependency> >> >> <dependency> >> <groupId>com.oracle</groupId> >> <artifactId>ojdbc8</artifactId> >> <version>12.2.0.1</version> >> </dependency> >> </dependencies> >> >> >> CAS runs fine at http://127.0.0.1:8080. >> >> Registered a JSON service with CAS to act as a demo OAuth client: >> >> { >> "@class": "org.apereo.cas.support.oauth.services.OAuthRegisteredServic >> e", >> "serviceId": "http://(127.0.0.1|localhost):8081/login/oauth2/cas", >> "clientId": "clientid", >> "clientSecret": "clientSecret", >> "name": "OAuth20ClientDemo", >> "id": 1002, >> "description": "", >> "evaluationOrder": 0, >> "attributeReleasePolicy": { >> "@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" >> } >> } >> >> When CAS starts, it automatically generate another JSON service (which >> seems a bit weird, however I cannot tell whether it is normal or not): >> >> { >> @class: org.apereo.cas.services.RegexRegisteredService >> serviceId: http://localhost:8080/oauth2.0/callbackAuthorize.* >> name: RegexRegisteredService >> id: 103356745490349536 >> description: OAuth Authentication Callback Request URL >> proxyPolicy: >> { >> @class: org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy >> } >> evaluationOrder: 0 >> usernameAttributeProvider: >> { >> @class: org.apereo.cas.services.DefaultRegisteredServiceUsernameProv >> ider >> canonicalizationMode: NONE >> encryptUsername: false >> } >> attributeReleasePolicy: >> { >> @class: org.apereo.cas.services.DenyAllAttributeReleasePolicy >> principalAttributesRepository: >> { >> @class: org.apereo.cas.authentication. >> principal.DefaultPrincipalAttributesRepository >> expiration: 2 >> timeUnit: HOURS >> } >> authorizedToReleaseCredentialPassword: false >> authorizedToReleaseProxyGrantingTicket: false >> excludeDefaultAttributes: true >> } >> multifactorPolicy: >> { >> @class: org.apereo.cas.services.DefaultRegisteredServiceMultifactorP >> olicy >> failureMode: CLOSED >> bypassEnabled: false >> } >> accessStrategy: >> { >> @class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrate >> gy >> enabled: true >> ssoEnabled: true >> requireAllAttributes: true >> caseInsensitive: false >> } >> } >> >> The demo client runs as another standalone Tomcat app at >> http://127.0.0.1:8081. >> >> Now comes the testing process. >> >> The first steps of the process look good: >> >> http://localhost:8081/login/oauth2/cas >> 302 -> >> http://127.0.0.1:8080/oauth2.0/authorize?client_id=clientid&; >> redirect_uri=http://localhost:8081/login/oauth2/cas&; >> response_type=code&state=2YqY0c >> 302 -> >> http://localhost:8080/login?service=http%3A%2F%2Flocalhost% >> 3A8080%2Foauth2.0%2FcallbackAuthorize%3Fclient_name% >> 3DCasOAuthClient%26client_id%3Dclientid%26redirect_uri% >> 3Dhttp%3A%2F%2Flocalhost%3A8081%2Flogin%2Foauth2%2Fcas >> >> After inputing correct username/password in the form and press LOGIN, A >> POST is submitted to: >> http://localhost:8080/login?service=http%3A%2F%2Flocalhost% >> 3A8080%2Foauth2.0%2FcallbackAuthorize%3Fclient_name% >> 3DCasOAuthClient%26client_id%3Dclientid%26redirect_uri% >> 3Dhttp%3A%2F%2Flocalhost%3A8081%2Flogin%2Foauth2%2Fcas >> >> The response is a 302 to the following url: >> >> http://localhost:8080/oauth2.0/callbackAuthorize?client_name >> =CasOAuthClient&client_id=clientid&redirect_uri=http://local >> host:8081/login/oauth2/cas&ticket=ST-6-T71F2TDPjCsPF9d3Shby-localhost >> >> *Here comes the problem: The response of the above url >> (/callbackAuthorize) is a 302 redirection to '/' (root path of CAS), which >> then redirects to the login page (/login). * >> >> I think the expected behavior of /callbackAuthorize should be a >> redirection back to the client app at http://localhost:8081/login/oa >> uth2/cas with the OAuth token issued. >> >> Did I get anything wrong or miss any configurations? >> >> Thanks. >> >> >> -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/9a4b7b3e-5746-4cef-8ae4- > e3e602f3be32%40apereo.org > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/9a4b7b3e-5746-4cef-8ae4-e3e602f3be32%40apereo.org?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD65aPVF7HBWC%2BrF9gBUmZz2VMLsp7O1y_LqL_8%2BhPvthShFbQ%40mail.gmail.com.
