<div dir="ltr">Hi Bill,<div><br></div><div> My goal is get liveoak, aerogear and keycloak working on different servers. LiveOak uses Keycloak and Aerogear. Following are the steps i took.</div><div><br></div><div> 1) Install Keycloak on one server with self signed certificate. It is accessible via <a href="https://XXX.XXX.XXX.XXX:8443/auth">https://XXX.XXX.XXX.XXX:8443/auth</a>. Worked</div><div> 2) Installed AreoGear on another server with self signed certificate. It is accessible via <a href="https://XXX.XXX.XXX.XXX:8443/ag-push">https://XXX.XXX.XXX.XXX:8443/ag-push</a>. Worked</div><div> 3) Imported attached JSON in as a new aerogear realm in keycloak. Worked</div><div> 4) Updated Keycloak to use MongoDB. Worked</div><div> 5) Update application aerogear with keycloak.json restarted wildfly server. Updated application under AreoGear to use <a href="https://XXX.XXX.XXX.XXX:8443/ag-push/*">https://XXX.XXX.XXX.XXX:8443/ag-push/*</a> as a redirect uri. Worked.</div><div> 6) Restarted both the wildfly servers.</div><div> 7) After restart tried to login to <a href="https://XXX.XXX.XXX.XXX:8443/ag-push/">https://XXX.XXX.XXX.XXX:8443/ag-push/</a> forwarded me to <a href="https://XXX.XXX.XXX.XXX:8443/auth">https://XXX.XXX.XXX.XXX:8443/auth</a> login page. Successfull login was achieved.</div><div> 8) PROBLEM: After login redirect to <a href="https://XXX.XXX.XXX.XXX:8443/ag-push/">https://XXX.XXX.XXX.XXX:8443/ag-push/</a> where by i get error "No state cookie" in AreoGear log, which is coming from OAuthRequestAuthenticator line 116 because the adapter can not find a cookie with name "<span style="color:rgb(223,80,0);font-family:Consolas,'Liberation Mono',Menlo,Courier,monospace;font-size:12px;line-height:16.7999992370605px;white-space:pre">OAuth_Token_Request_State</span>" in HTTP.</div><div><br></div><div> Troubleshooting Try 1.</div><div> 1) updated aerogear to use 1.0.1.Beta1 Adapter. Still works does not solve the problem same error.</div><div><br></div><div> Troubleshooting Try 2.</div><div> 1) updated keycloak.json by adding <i>"disable-trust-manager": true</i>. Still works does not solve the problem same error.</div><div> </div><div> Troubleshooting Try 2. Still have not done but will do today is </div><div> 1) updated keycloak.json by adding <i>"disable-trust-manager": false,"truststore": "/path","truststore-password": "password"</i>. Will report back shortly.</div><div><br></div><div>Regards,</div><div>Pratik Parikh</div></div><div class="gmail_extra"><br><div class="gmail_quote">On Fri, Nov 14, 2014 at 8:46 AM, Bill Burke <span dir="ltr"><<a href="mailto:bburke@redhat.com" target="_blank">bburke@redhat.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Can you explain your problem again? I think I am misunderstanding what<br>
problems you are having. You linked this message:<br>
<br>
<a href="http://lists.jboss.org/pipermail/keycloak-user/2014-November/001170.html" target="_blank">http://lists.jboss.org/pipermail/keycloak-user/2014-November/001170.html</a><br>
<br>
We do not support OIDC scope param, but you can limit the application's<br>
scope in the admin console.<br>
<span class="im HOEnZb"><br>
On 11/13/2014 10:28 PM, Pratik Parikh wrote:<br>
> Hi Bill,<br>
><br>
> Is this because both of my server (keycloak and aerogear are<br>
> https). Do i need to establish trust between them?<br>
><br>
> Regards,<br>
> Pratik Parikh<br>
><br>
> On Thu, Nov 13, 2014 at 8:18 PM, Pratik Parikh<br>
</span><span class="im HOEnZb">> <<a href="mailto:pratik.p.parikh@gmail.com">pratik.p.parikh@gmail.com</a> <mailto:<a href="mailto:pratik.p.parikh@gmail.com">pratik.p.parikh@gmail.com</a>>> wrote:<br>
><br>
> Hi Bill,<br>
><br>
> Thanks i turned the scope off under the application but that<br>
> did not help. Could you please help us understand what is going<br>
> on. I am trying to look the code but seems like it is going to take<br>
> be a bit to figure it out. It seems like HttpFacade.Cookies is<br>
> suppose to have state cookie which is contained in<br>
> KeycloakDeployment. I did try what you suggest was that not<br>
> correctly understood by me? I am new to keycloak but this is a great<br>
> project would like to understand it and use it to its fullest<br>
> extend. Can you help me get past this problem. Thanks in advance.<br>
><br>
> Regards,<br>
> --<br>
> Pratik Parikh<br>
> - Mantra - Keep It Simple and Straightforward<br>
><br>
><br>
><br>
><br>
> --<br>
> Pratik Parikh<br>
> - Mantra - Keep It Simple and Straightforward<br>
><br>
><br>
</span><div class="HOEnZb"><div class="h5">> _______________________________________________<br>
> keycloak-user mailing list<br>
> <a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
> <a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
><br>
<br>
--<br>
Bill Burke<br>
JBoss, a division of Red Hat<br>
<a href="http://bill.burkecentral.com" target="_blank">http://bill.burkecentral.com</a><br>
_______________________________________________<br>
keycloak-user mailing list<br>
<a href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a><br>
<a href="https://lists.jboss.org/mailman/listinfo/keycloak-user" target="_blank">https://lists.jboss.org/mailman/listinfo/keycloak-user</a><br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature">Pratik Parikh<br>- Mantra - Keep It Simple and Straightforward</div>
</div>