We are on https. For a while it works and at some point - somehow related to existing/expired session it goes to location /.
On Monday, December 4, 2017 at 12:51:03 PM UTC+1, Fei Wang wrote: > > When I use HTTPS , the issue gone. What's the trick here? > > On Mon, Dec 4, 2017 at 7:27 PM, Sandor Juhasz <[email protected] > <javascript:>> wrote: > >> Happening to us with 5.1.6, using openid connect webflow. Same symptoms, >> only thing making it >> interesting is that it does not happen every time. >> >> See threads: >> https://groups.google.com/a/apereo.org/forum/#!topic/cas-user/TDh7Zz7g5TY >> >> >> -- >> *Sándor Juhász* >> System Administrator >> *ChemAxon* *Ltd*. >> Building Hx, GraphiSoft Park, Záhony utca 7, Budapest, Hungary, H-1031 >> Cell: +36704258964 >> >> On Mon, Dec 4, 2017 at 11:45 AM, Fei Wang <[email protected] >> <javascript:>> wrote: >> >>> I met the exactly same problem . Have you resolve it ? >>> >>> >>> On Wednesday, September 6, 2017 at 11:13:56 AM UTC+8, Zhang Yu wrote: >>>> >>>> env: >>>> Java 8, CAS 5.1.3, Tomcat 8.5 (standalone), IntelliJ, macOS Sierra. >>>> >>>> pom.xml: >>>> >>>> <properties> >>>> <cas.version>5.1.3</cas.version> >>>> </properties> >>>> >>>> <dependencies> >>>> <dependency> >>>> <groupId>org.apereo.cas</groupId> >>>> <artifactId>cas-server-webapp</artifactId> >>>> <version>${cas.version}</version> >>>> <type>war</type> >>>> <scope>runtime</scope> >>>> </dependency> >>>> <dependency> >>>> <groupId>org.apereo.cas</groupId> >>>> <artifactId>cas-server-support-jdbc</artifactId> >>>> <version>${cas.version}</version> >>>> </dependency> >>>> <dependency> >>>> <groupId>org.apereo.cas</groupId> >>>> >>>> <artifactId>cas-server-support-json-service-registry</artifactId> >>>> <version>${cas.version}</version> >>>> </dependency> >>>> <dependency> >>>> <groupId>org.apereo.cas</groupId> >>>> <artifactId>cas-server-webapp-config-security</artifactId> >>>> <version>${cas.version}</version> >>>> </dependency> >>>> <dependency> >>>> <groupId>org.apereo.cas</groupId> >>>> <artifactId>cas-server-support-oauth-webflow</artifactId> >>>> <version>${cas.version}</version> >>>> </dependency> >>>> >>>> <dependency> >>>> <groupId>com.oracle</groupId> >>>> <artifactId>ojdbc8</artifactId> >>>> <version>12.2.0.1</version> >>>> </dependency> >>>> </dependencies> >>>> >>>> >>>> CAS runs fine at http://127.0.0.1:8080. >>>> >>>> Registered a JSON service with CAS to act as a demo OAuth client: >>>> >>>> { >>>> "@class": >>>> "org.apereo.cas.support.oauth.services.OAuthRegisteredService", >>>> "serviceId": "http://(127.0.0.1|localhost):8081/login/oauth2/cas", >>>> "clientId": "clientid", >>>> "clientSecret": "clientSecret", >>>> "name": "OAuth20ClientDemo", >>>> "id": 1002, >>>> "description": "", >>>> "evaluationOrder": 0, >>>> "attributeReleasePolicy": { >>>> "@class": "org.apereo.cas.services.ReturnAllAttributeReleasePolicy" >>>> } >>>> } >>>> >>>> When CAS starts, it automatically generate another JSON service (which >>>> seems a bit weird, however I cannot tell whether it is normal or not): >>>> >>>> { >>>> @class: org.apereo.cas.services.RegexRegisteredService >>>> serviceId: http://localhost:8080/oauth2.0/callbackAuthorize.* >>>> name: RegexRegisteredService >>>> id: 103356745490349536 >>>> description: OAuth Authentication Callback Request URL >>>> proxyPolicy: >>>> { >>>> @class: org.apereo.cas.services.RefuseRegisteredServiceProxyPolicy >>>> } >>>> evaluationOrder: 0 >>>> usernameAttributeProvider: >>>> { >>>> @class: >>>> org.apereo.cas.services.DefaultRegisteredServiceUsernameProvider >>>> canonicalizationMode: NONE >>>> encryptUsername: false >>>> } >>>> attributeReleasePolicy: >>>> { >>>> @class: org.apereo.cas.services.DenyAllAttributeReleasePolicy >>>> principalAttributesRepository: >>>> { >>>> @class: >>>> org.apereo.cas.authentication.principal.DefaultPrincipalAttributesRepository >>>> expiration: 2 >>>> timeUnit: HOURS >>>> } >>>> authorizedToReleaseCredentialPassword: false >>>> authorizedToReleaseProxyGrantingTicket: false >>>> excludeDefaultAttributes: true >>>> } >>>> multifactorPolicy: >>>> { >>>> @class: >>>> org.apereo.cas.services.DefaultRegisteredServiceMultifactorPolicy >>>> failureMode: CLOSED >>>> bypassEnabled: false >>>> } >>>> accessStrategy: >>>> { >>>> @class: >>>> org.apereo.cas.services.DefaultRegisteredServiceAccessStrategy >>>> enabled: true >>>> ssoEnabled: true >>>> requireAllAttributes: true >>>> caseInsensitive: false >>>> } >>>> } >>>> >>>> The demo client runs as another standalone Tomcat app at >>>> http://127.0.0.1:8081. >>>> >>>> Now comes the testing process. >>>> >>>> The first steps of the process look good: >>>> >>>> http://localhost:8081/login/oauth2/cas >>>> 302 -> >>>> >>>> http://127.0.0.1:8080/oauth2.0/authorize?client_id=clientid&redirect_uri=http://localhost:8081/login/oauth2/cas&response_type=code&state=2YqY0c >>>> 302 -> >>>> >>>> http://localhost:8080/login?service=http%3A%2F%2Flocalhost%3A8080%2Foauth2.0%2FcallbackAuthorize%3Fclient_name%3DCasOAuthClient%26client_id%3Dclientid%26redirect_uri%3Dhttp%3A%2F%2Flocalhost%3A8081%2Flogin%2Foauth2%2Fcas >>>> >>>> After inputing correct username/password in the form and press LOGIN, A >>>> POST is submitted to: >>>> >>>> http://localhost:8080/login?service=http%3A%2F%2Flocalhost%3A8080%2Foauth2.0%2FcallbackAuthorize%3Fclient_name%3DCasOAuthClient%26client_id%3Dclientid%26redirect_uri%3Dhttp%3A%2F%2Flocalhost%3A8081%2Flogin%2Foauth2%2Fcas >>>> >>>> The response is a 302 to the following url: >>>> >>>> >>>> http://localhost:8080/oauth2.0/callbackAuthorize?client_name=CasOAuthClient&client_id=clientid&redirect_uri=http://localhost:8081/login/oauth2/cas&ticket=ST-6-T71F2TDPjCsPF9d3Shby-localhost >>>> >>>> *Here comes the problem: The response of the above url >>>> (/callbackAuthorize) is a 302 redirection to '/' (root path of CAS), which >>>> then redirects to the login page (/login). * >>>> >>>> I think the expected behavior of /callbackAuthorize should be a >>>> redirection back to the client app at >>>> http://localhost:8081/login/oauth2/cas with the OAuth token issued. >>>> >>>> Did I get anything wrong or miss any configurations? >>>> >>>> Thanks. >>>> >>>> >>>> -- >>> - Website: https://apereo.github.io/cas >>> - Gitter Chatroom: https://gitter.im/apereo/cas >>> - List Guidelines: https://goo.gl/1VRrw7 >>> - Contributions: https://goo.gl/mh7qDG >>> --- >>> You received this message because you are subscribed to the Google >>> Groups "CAS Community" group. >>> To unsubscribe from this group and stop receiving emails from it, send >>> an email to [email protected] <javascript:>. >>> To view this discussion on the web visit >>> https://groups.google.com/a/apereo.org/d/msgid/cas-user/9a4b7b3e-5746-4cef-8ae4-e3e602f3be32%40apereo.org >>> >>> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/9a4b7b3e-5746-4cef-8ae4-e3e602f3be32%40apereo.org?utm_medium=email&utm_source=footer> >>> . >>> >> >> -- >> - Website: https://apereo.github.io/cas >> - Gitter Chatroom: https://gitter.im/apereo/cas >> - List Guidelines: https://goo.gl/1VRrw7 >> - Contributions: https://goo.gl/mh7qDG >> --- >> You received this message because you are subscribed to the Google Groups >> "CAS Community" group. >> To unsubscribe from this group and stop receiving emails from it, send an >> email to [email protected] <javascript:>. >> To view this discussion on the web visit >> https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD65aPVF7HBWC%2BrF9gBUmZz2VMLsp7O1y_LqL_8%2BhPvthShFbQ%40mail.gmail.com >> >> <https://groups.google.com/a/apereo.org/d/msgid/cas-user/CAD65aPVF7HBWC%2BrF9gBUmZz2VMLsp7O1y_LqL_8%2BhPvthShFbQ%40mail.gmail.com?utm_medium=email&utm_source=footer> >> . >> > > -- - Website: https://apereo.github.io/cas - Gitter Chatroom: https://gitter.im/apereo/cas - List Guidelines: https://goo.gl/1VRrw7 - Contributions: https://goo.gl/mh7qDG --- You received this message because you are subscribed to the Google Groups "CAS Community" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/a/apereo.org/d/msgid/cas-user/6972ab63-e366-44cb-b3dc-af0fb067d836%40apereo.org.
