When I use HTTPS , the issue gone. What's the trick here? On Mon, Dec 4, 2017 at 7:27 PM, Sandor Juhasz <[email protected]> wrote:
> Happening to us with 5.1.6, using openid connect webflow. Same symptoms, > only thing making it > interesting is that it does not happen every time. > > See threads: > https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/TDh7Zz7g5TY > > > -- > *Sándor Juhász* > System Administrator > *ChemAxon* *Ltd*. > Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031 > Cell: +36704258964 <+36%2070%20425%208964> > > On Mon, Dec 4, 2017 at 11:45 AM, Fei Wang <[email protected]> wrote: > >> I met the exactly same problem . Have you resolve it ? >> >> >> On Wednesday, September 6, 2017 at 11:13:56 AM UTC+8, Zhang Yu wrote: >>> >>> env: >>> Java 8, CAS 5.1.3, Tomcat 8.5 (standalone), IntelliJ, macOS Sierra. >>> >>> pom.xml: >>> >>> <properties> >>> <cas.version>5.1.3</cas.version> >>> </properties> >>> >>> <dependencies> >>> <dependency> >>> <groupId>org.apereo.cas</groupId> >>> <artifactId>cas-server-webapp</artifactId> >>> <version>${cas.version}</version> >>> <type>war</type> >>> <scope>runtime</scope> >>> </dependency> >>> <dependency> >>> <groupId>org.apereo.cas</groupId> >>> <artifactId>cas-server-support-jdbc</artifactId> >>> <version>${cas.version}</version> >>> </dependency> >>> <dependency> >>> <groupId>org.apereo.cas</groupId> >>> <artifactId>cas-server-support-json-service-registry</artifa >>> ctId> >>> <version>${cas.version}</version> >>> </dependency> >>> <dependency> >>> <groupId>org.apereo.cas</groupId> >>> <artifactId>cas-server-webapp-config-security</artifactId> >>> <version>${cas.version}</version> >>> </dependency> >>> <dependency> >>> <groupId>org.apereo.cas</groupId> >>> <artifactId>cas-server-support-oauth-webflow</artifactId> >>> <version>${cas.version}</version> >>> </dependency> >>> >>> <dependency> >>> <groupId>com.oracle</groupId> >>> <artifactId>ojdbc8</artifactId> >>> <version>12.2.0.1</version> >>> </dependency> >>> </dependencies> >>> >>> >>> CAS runs fine at http://127.0.0.1:8080. >>> >>> Registered a JSON service with CAS to act as a demo OAuth client: >>> >>> { >>> "@class": "org.apereo.cas.support.oauth.services.OAuthRegisteredServic >>> e", >>> "serviceId": "http://(127.0.0.1|localhost):8081/login/oauth2/cas", >>> "clientId": "clientid", >>> "clientSecret": "clientSecret", >>> "name": "OAuth20ClientDemo", >>> "id": 1002, >>> "description": "", >>> "evaluationOrder": 0, >>> "attributeReleasePolicy": { >>> "@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" >>> } >>> } >>> >>> When CAS starts, it automatically generate another JSON service (which >>> seems a bit weird, however I cannot tell whether it is normal or not): >>> >>> { >>> @class: org.apereo.cas.services.RegexRegisteredService >>> serviceId: http://localhost:8080/oauth2.0/callbackAuthorize.* >>> name: RegexRegisteredService >>> id: 103356745490349536 >>> description: OAuth Authentication Callback Request URL >>> proxyPolicy: >>> { >>> @class: org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy >>> } >>> evaluationOrder: 0 >>> usernameAttributeProvider: >>> { >>> @class: org.apereo.cas.services.DefaultRegisteredServiceUsernameProv >>> ider >>> canonicalizationMode: NONE >>> encryptUsername: false >>> } >>> attributeReleasePolicy: >>> { >>> @class: org.apereo.cas.services.DenyAllAttributeReleasePolicy >>> principalAttributesRepository: >>> { >>> @class: org.apereo.cas.authentication. >>> principal.DefaultPrincipalAttributesRepository >>> expiration: 2 >>> timeUnit: HOURS >>> } >>> authorizedToReleaseCredentialPassword: false >>> authorizedToReleaseProxyGrantingTicket: false >>> excludeDefaultAttributes: true >>> } >>> multifactorPolicy: >>> { >>> @class: org.apereo.cas.services.DefaultRegisteredServiceMultifactorP >>> olicy >>> failureMode: CLOSED >>> bypassEnabled: false >>> } >>> accessStrategy: >>> { >>> @class: org.apereo.cas.services.DefaultRegisteredServiceAccessStrate >>> gy >>> enabled: true >>> ssoEnabled: true >>> requireAllAttributes: true >>> caseInsensitive: false >>> } >>> } >>> >>> The demo client runs as another standalone Tomcat app at >>> http://127.0.0.1:8081. >>> >>> Now comes the testing process. >>> >>> The first steps of the process look good: >>> >>> http://localhost:8081/login/oauth2/cas >>> 302 -> >>> http://127.0.0.1:8080/oauth2.0/authorize?client_id=clientid&; >>> redirect_uri=http://localhost:8081/login/oauth2/cas&response >>> _type=code&state=2YqY0c >>> 302 -> >>> http://localhost:8080/login?service=http%3A%2F%2Flocalhost%3 >>> A8080%2Foauth2.0%2FcallbackAuthorize%3Fclient_name%3DCasOAut >>> hClient%26client_id%3Dclientid%26redirect_uri%3Dhttp%3A%2F% >>> 2Flocalhost%3A8081%2Flogin%2Foauth2%2Fcas >>> >>> After inputing correct username/password in the form and press LOGIN, A >>> POST is submitted to: >>> http://localhost:8080/login?service=http%3A%2F%2Flocalhost%3 >>> A8080%2Foauth2.0%2FcallbackAuthorize%3Fclient_name%3DCasOAut >>> hClient%26client_id%3Dclientid%26redirect_uri%3Dhttp%3A%2F% >>> 2Flocalhost%3A8081%2Flogin%2Foauth2%2Fcas >>> >>> The response is a 302 to the following url: >>> >>> http://localhost:8080/oauth2.0/callbackAuthorize?client_name >>> =CasOAuthClient&client_id=clientid&redirect_uri=http://local >>> host:8081/login/oauth2/cas&ticket=ST-6-T71F2TDPjCsPF9d3Shby-localhost >>> >>> *Here comes the problem: The response of the above url >>> (/callbackAuthorize) is a 302 redirection to '/' (root path of CAS), which >>> then redirects to the login page (/login). * >>> >>> I think the expected behavior of /callbackAuthorize should be a >>> redirection back to the client app at http://localhost:8081/login/oa >>> uth2/cas with the OAuth token issued. >>> >>> Did I get anything wrong or miss any configurations? >>> >>> Thanks. >>> >>> >>> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected]. >> To view this discussion on the web visit https://groups.google.com/a/ap >> ereo.org/d/msgid/cas-user/9a4b7b3e-5746-4cef-8ae4-e3e602f3be >> 32%40apereo.org >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/9a4b7b3e-5746-4cef-8ae4-e3e602f3be32%40apereo.org?utm_medium=email&utm_source=footer> >> . >> > > -- > - Website: https://apereo.github.io/cas > - Gitter Chatroom: https://gitter.im/apereo/cas > - List Guidelines: https://goo.gl/1VRrw7 > - Contributions: https://goo.gl/mh7qDG > --- > You received this message because you are subscribed to the Google Groups > "CAS Community" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > To view this discussion on the web visit https://groups.google.com/a/ > apereo.org/d/msgid/cas-user/CAD65aPVF7HBWC%2BrF9gBUmZz2VMLsp7O1y_LqL_8% > 2BhPvthShFbQ%40mail.gmail.com > <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD65aPVF7HBWC%2BrF9gBUmZz2VMLsp7O1y_LqL_8%2BhPvthShFbQ%40mail.gmail.com?utm_medium=email&utm_source=footer> > . > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAH9Z_49%3DRruGfJjZ%3DOpEOtKzG%3DDMAf8tyi1-7tjMvrmH%3DYd8xg%40mail.gmail.com.
