<div dir="ltr"><div>Facebook adds "#_=_" at the end of redirect URL for "security reasons", so SPA apps won't work unless you remove it.<br><br></div>In Angular apps you should remove before call keycloak:<br><br>if (window.location.hash === '#_=_') {<br> window.location.hash = '';<br>}<br></div><br><div class="gmail_quote">On Thu, Mar 26, 2015 at 12:14 PM Stian Thorgersen <<a href="mailto:stian@redhat.com">stian@redhat.com</a>> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">AFAIK Facebook is OAuth2 + custom weird stuff that looks like but isn't OpenID Connect<br>
<br>
----- Original Message -----<br>
> From: "Stian Thorgersen" <<a href="mailto:stian@redhat.com" target="_blank">stian@redhat.com</a>><br>
> To: "Bill Burke" <<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>><br>
> Cc: <a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a><br>
> Sent: Thursday, 26 March, 2015 4:11:11 PM<br>
> Subject: Re: [keycloak-dev] can't figure this out<br>
><br>
> I remember seeing the '#_=_' crap a while ago, I believe that was before<br>
> Pedro started brokering.<br>
><br>
> ----- Original Message -----<br>
> > From: "Bill Burke" <<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>><br>
> > To: <a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a><br>
> > Sent: Thursday, 26 March, 2015 2:54:27 PM<br>
> > Subject: [keycloak-dev] can't figure this out<br>
> ><br>
> > I'm going crazy... I'm testing facebook login with the admin console as<br>
> > the test app.<br>
> ><br>
> > 1. Facebook auth succeeds<br>
> > 2. Redirect back to admin console<br>
> > 3. For some reason admin console doesn't like the redirect URL and does<br>
> > a redirect back to keycloak login with a fragment of #_=_<br>
> > 4. I'm already logged in, so redirect back<br>
> > 5. Success, but the fragment is #_=_<br>
> ><br>
> > Login works for github though...I'm freakin stumped. The initial<br>
> > redirect back to the admin console is the same exact redirect uri for<br>
> > both github and facebook.<br>
> ><br>
> > Has anybody seen this before?<br>
> ><br>
> > --<br>
> > Bill Burke<br>
> > JBoss, a division of Red Hat<br>
> > <a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a><br>
> > ______________________________<u></u>_________________<br>
> > keycloak-dev mailing list<br>
> > <a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a><br>
> > <a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/keycloak-dev</a><br>
> ><br>
> ______________________________<u></u>_________________<br>
> keycloak-dev mailing list<br>
> <a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/keycloak-dev</a><br>
><br>
______________________________<u></u>_________________<br>
keycloak-dev mailing list<br>
<a href="mailto:keycloak-dev@lists.jboss.org" target="_blank">keycloak-dev@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-dev" target="_blank">https://lists.jboss.org/<u></u>mailman/listinfo/keycloak-dev</a><br>
</blockquote></div>