3:11 p.m.
Hello Keycloak team,
I'm trying to move my OAuth2 demo app from Keyclaok 1.5 to Keyclaok 1.9.1.
I've change the OAuth2 endpoints for the access token. I manage the Oauth2
dansc ok but when trying to access a protected resource I hit the error:
22:00:13,501 ERROR [org.keycloak.adapters.BearerTokenRequestAuthenticator]
(default task-101) Failed to verify token:
org.keycloak.common.VerificationException: Realm URL is null. Make sure to
add auth-server-url to the configuration of your adapter!
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
at
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticateToken(BearerTokenRequestAuthenticator.java:87)
at
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticate(BearerTokenRequestAuthenticator.java:82)
at
org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:65)
at
org.keycloak.adapters.undertow.AbstractUndertowKeycloakAuthMech.keycloakAuthenticate(AbstractUndertowKeycloakAuthMech.java:110)
at
org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:92)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
at
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
at
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
at
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
at
io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)
at
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
at
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
at
io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)
at
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
at
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
at
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
at
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:69)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
My realm setup is here:
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/c...
The keycloak.json used for the protected endpoint is:
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
Is there some specific settings I should add to work with Keycloak 1.9.x?
Your help would be welcome.
++
Corinne
5:13 p.m.
Hi Corinne, I tried here with Keycloak 1.9.3.Final and couldn't
reproduce your issue.
I followed exactly the same steps described at your readme file.
On 2016-05-02, Corinne Krych wrote:
Hello Keycloak team,
I'm trying to move my OAuth2 demo app from Keyclaok 1.5 to Keyclaok 1.9.1.
I've change the OAuth2 endpoints for the access token. I manage the Oauth2
dansc ok but when trying to access a protected resource I hit the error:
22:00:13,501 ERROR [org.keycloak.adapters.BearerTokenRequestAuthenticator]
(default task-101) Failed to verify token:
org.keycloak.common.VerificationException: Realm URL is null. Make sure to
add auth-server-url to the configuration of your adapter!
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
at
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticateToken(BearerTokenRequestAuthenticator.java:87)
at
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticate(BearerTokenRequestAuthenticator.java:82)
at
org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:65)
at
org.keycloak.adapters.undertow.AbstractUndertowKeycloakAuthMech.keycloakAuthenticate(AbstractUndertowKeycloakAuthMech.java:110)
at
org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:92)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
at
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
at
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
at
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
at
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
at
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
at
io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)
at
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
at
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
at
io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)
at
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
at
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
at
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
at
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:69)
at
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
at
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
at
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
at
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
at
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
at
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
at
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
at java.lang.Thread.run(Thread.java:745)
My realm setup is here:
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/c...
The keycloak.json used for the protected endpoint is:
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
Is there some specific settings I should add to work with Keycloak 1.9.x?
Your help would be welcome.
++
Corinne
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
PGP: 0x84DC9914
1:35 a.m.
Ah let me try with KC1.9.3.Final then.
++
Corinne
On 3 May 2016 at 00:13, Bruno Oliveira <bruno(a)abstractj.org> wrote:
Hi Corinne, I tried here with Keycloak 1.9.3.Final and couldn't
reproduce your issue.
I followed exactly the same steps described at your readme file.
On 2016-05-02, Corinne Krych wrote:
> Hello Keycloak team,
>
> I'm trying to move my OAuth2 demo app from Keyclaok 1.5 to Keyclaok
1.9.1.
> I've change the OAuth2 endpoints for the access token. I manage the
Oauth2
> dansc ok but when trying to access a protected resource I hit the error:
>
> 22:00:13,501 ERROR
[org.keycloak.adapters.BearerTokenRequestAuthenticator]
> (default task-101) Failed to verify token:
> org.keycloak.common.VerificationException: Realm URL is null. Make sure
to
> add auth-server-url to the configuration of your adapter!
> at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
> at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
> at
>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticateToken(BearerTokenRequestAuthenticator.java:87)
> at
>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticate(BearerTokenRequestAuthenticator.java:82)
> at
>
org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:65)
> at
>
org.keycloak.adapters.undertow.AbstractUndertowKeycloakAuthMech.keycloakAuthenticate(AbstractUndertowKeycloakAuthMech.java:110)
> at
>
org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:92)
> at
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
> at
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
> at
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
> at
>
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
> at
>
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
> at
>
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
> at
>
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
> at
>
io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)
> at
>
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
> at
>
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
> at
>
io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)
> at
>
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
> at
>
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
> at
>
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
> at
>
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:69)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
> at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
> at
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
> at
>
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at
>
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
>
> My realm setup is here:
>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/c...
>
> The keycloak.json used for the protected endpoint is:
>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
>
> Is there some specific settings I should add to work with Keycloak 1.9.x?
>
> Your help would be welcome.
>
> ++
> Corinne
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
PGP: 0x84DC9914
2:04 a.m.
Hello Bruno
I've tried with Keycloak-demo-1.9.3 and I still hit the issue:
09:02:27,847 ERROR [org.keycloak.adapters.BearerTokenRequestAuthenticator]
(default task-74) Failed to verify token:
org.keycloak.common.VerificationException: Realm URL is null. Make sure to
add auth-server-url to the configuration of your adapter!
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
I think the secure endpoint is missing some configuration but not sure what
i'm missing.
++
Corinne
On 3 May 2016 at 08:35, Corinne Krych <corinnekrych(a)gmail.com> wrote:
Ah let me try with KC1.9.3.Final then.
++
Corinne
On 3 May 2016 at 00:13, Bruno Oliveira <bruno(a)abstractj.org> wrote:
> Hi Corinne, I tried here with Keycloak 1.9.3.Final and couldn't
> reproduce your issue.
>
> I followed exactly the same steps described at your readme file.
>
> On 2016-05-02, Corinne Krych wrote:
> > Hello Keycloak team,
> >
> > I'm trying to move my OAuth2 demo app from Keyclaok 1.5 to Keyclaok
> 1.9.1.
> > I've change the OAuth2 endpoints for the access token. I manage the
> Oauth2
> > dansc ok but when trying to access a protected resource I hit the error:
> >
> > 22:00:13,501 ERROR
> [org.keycloak.adapters.BearerTokenRequestAuthenticator]
> > (default task-101) Failed to verify token:
> > org.keycloak.common.VerificationException: Realm URL is null. Make sure
> to
> > add auth-server-url to the configuration of your adapter!
> > at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
> > at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
> > at
> >
>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticateToken(BearerTokenRequestAuthenticator.java:87)
> > at
> >
>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticate(BearerTokenRequestAuthenticator.java:82)
> > at
> >
>
org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:65)
> > at
> >
>
org.keycloak.adapters.undertow.AbstractUndertowKeycloakAuthMech.keycloakAuthenticate(AbstractUndertowKeycloakAuthMech.java:110)
> > at
> >
>
org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:92)
> > at
> >
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
> > at
> >
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
> > at
> >
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
> > at
> >
>
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
> > at
> >
>
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
> > at
> >
>
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
> > at
> >
>
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
> > at
> >
>
io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
> > at
> >
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> > at
> >
>
io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)
> > at
> >
>
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
> > at
> >
>
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
> > at
> >
>
io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)
> > at
> >
>
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
> > at
> >
>
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
> > at
> >
>
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
> > at
> >
>
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
> > at
> >
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> > at
> >
>
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> > at
> >
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> > at
> >
>
org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:69)
> > at
> >
> io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> > at
> >
>
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
> > at
> >
>
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
> > at
> >
>
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> > at
> >
>
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
> > at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
> > at
> io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
> > at
> >
> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> > at
> >
> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> > at java.lang.Thread.run(Thread.java:745)
> >
> > My realm setup is here:
> >
>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/c...
> >
> > The keycloak.json used for the protected endpoint is:
> >
>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
> >
> > Is there some specific settings I should add to work with Keycloak
> 1.9.x?
> >
> > Your help would be welcome.
> >
> > ++
> > Corinne
>
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev(a)lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
>
> --
>
> abstractj
> PGP: 0x84DC9914
>
2:20 a.m.
Strange, this error usually happens if you don't have "auth-server-url"
in the configuration of keycloak.json . But you have it in
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
as you pointed in the first mail.
Isn't any chance there is other REST backend, which you are calling and
which is missing this?
If not, then can you try to temporarily use absolute URL like:
"auth-server-url" : "http://localhost:8080/auth"
and see if it helps?
Marek
On 03/05/16 09:04, Corinne Krych wrote:
Hello Bruno
I've tried with Keycloak-demo-1.9.3 and I still hit the issue:
09:02:27,847 ERROR
[org.keycloak.adapters.BearerTokenRequestAuthenticator] (default
task-74) Failed to verify token:
org.keycloak.common.VerificationException: Realm URL is null. Make
sure to add auth-server-url to the configuration of your adapter!
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
I think the secure endpoint is missing some configuration but not sure
what i'm missing.
++
Corinne
On 3 May 2016 at 08:35, Corinne Krych <corinnekrych(a)gmail.com
<mailto:corinnekrych@gmail.com>> wrote:
Ah let me try with KC1.9.3.Final then.
++
Corinne
On 3 May 2016 at 00:13, Bruno Oliveira <bruno(a)abstractj.org
<mailto:bruno@abstractj.org>> wrote:
Hi Corinne, I tried here with Keycloak 1.9.3.Final and couldn't
reproduce your issue.
I followed exactly the same steps described at your readme file.
On 2016-05-02, Corinne Krych wrote:
> Hello Keycloak team,
>
> I'm trying to move my OAuth2 demo app from Keyclaok 1.5 to
Keyclaok 1.9.1.
> I've change the OAuth2 endpoints for the access token. I
manage the Oauth2
> dansc ok but when trying to access a protected resource I
hit the error:
>
> 22:00:13,501 ERROR
[org.keycloak.adapters.BearerTokenRequestAuthenticator]
> (default task-101) Failed to verify token:
> org.keycloak.common.VerificationException: Realm URL is
null. Make sure to
> add auth-server-url to the configuration of your adapter!
> at
org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
> at
org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
> at
>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticateToken(BearerTokenRequestAuthenticator.java:87)
> at
>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticate(BearerTokenRequestAuthenticator.java:82)
> at
>
org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:65)
> at
>
org.keycloak.adapters.undertow.AbstractUndertowKeycloakAuthMech.keycloakAuthenticate(AbstractUndertowKeycloakAuthMech.java:110)
> at
>
org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:92)
> at
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
> at
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
> at
>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
> at
>
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
> at
>
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
> at
>
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
> at
>
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
> at
>
io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)
> at
>
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
> at
>
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
> at
>
io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)
> at
>
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
> at
>
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
> at
>
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
> at
>
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:69)
> at
>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
> at
>
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
> at
io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
> at
io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
> at
>
java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
> at
>
java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
> at java.lang.Thread.run(Thread.java:745)
>
> My realm setup is here:
>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/c...
>
> The keycloak.json used for the protected endpoint is:
>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
>
> Is there some specific settings I should add to work with
Keycloak 1.9.x?
>
> Your help would be welcome.
>
> ++
> Corinne
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
<mailto:keycloak-dev@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
PGP: 0x84DC9914
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
5:33 a.m.
Thanks Bruno, Marek,
My issue was a exactly this missing auth-server-url on keycloak.jason. I
was on a non-rebased branch :))
Thanks again,
++
Corinne
On 3 May 2016 at 09:20, Marek Posolda <mposolda(a)redhat.com> wrote:
Strange, this error usually happens if you don't have
"auth-server-url" in
the configuration of keycloak.json . But you have it in
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
as you pointed in the first mail.
Isn't any chance there is other REST backend, which you are calling and
which is missing this?
If not, then can you try to temporarily use absolute URL like:
"auth-server-url" : "http://localhost:8080/auth"
<http://localhost:8080/auth>
and see if it helps?
Marek
On 03/05/16 09:04, Corinne Krych wrote:
Hello Bruno
I've tried with Keycloak-demo-1.9.3 and I still hit the issue:
09:02:27,847 ERROR [org.keycloak.adapters.BearerTokenRequestAuthenticator]
(default task-74) Failed to verify token:
org.keycloak.common.VerificationException: Realm URL is null. Make sure to
add auth-server-url to the configuration of your adapter!
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
I think the secure endpoint is missing some configuration but not sure
what i'm missing.
++
Corinne
On 3 May 2016 at 08:35, Corinne Krych <corinnekrych(a)gmail.com> wrote:
> Ah let me try with KC1.9.3.Final then.
>
> ++
> Corinne
>
> On 3 May 2016 at 00:13, Bruno Oliveira < <bruno(a)abstractj.org>
> bruno(a)abstractj.org> wrote:
>
>> Hi Corinne, I tried here with Keycloak 1.9.3.Final and couldn't
>> reproduce your issue.
>>
>> I followed exactly the same steps described at your readme file.
>>
>> On 2016-05-02, Corinne Krych wrote:
>> > Hello Keycloak team,
>> >
>> > I'm trying to move my OAuth2 demo app from Keyclaok 1.5 to Keyclaok
>> 1.9.1.
>> > I've change the OAuth2 endpoints for the access token. I manage the
>> Oauth2
>> > dansc ok but when trying to access a protected resource I hit the
>> error:
>> >
>> > 22:00:13,501 ERROR
>> [org.keycloak.adapters.BearerTokenRequestAuthenticator]
>> > (default task-101) Failed to verify token:
>> > org.keycloak.common.VerificationException: Realm URL is null. Make
>> sure to
>> > add auth-server-url to the configuration of your adapter!
>> > at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:46)
>> > at org.keycloak.RSATokenVerifier.verifyToken(RSATokenVerifier.java:35)
>> > at
>> >
>>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticateToken(BearerTokenRequestAuthenticator.java:87)
>> > at
>> >
>>
org.keycloak.adapters.BearerTokenRequestAuthenticator.authenticate(BearerTokenRequestAuthenticator.java:82)
>> > at
>> >
>>
org.keycloak.adapters.RequestAuthenticator.authenticate(RequestAuthenticator.java:65)
>> > at
>> >
>>
org.keycloak.adapters.undertow.AbstractUndertowKeycloakAuthMech.keycloakAuthenticate(AbstractUndertowKeycloakAuthMech.java:110)
>> > at
>> >
>>
org.keycloak.adapters.undertow.ServletKeycloakAuthMech.authenticate(ServletKeycloakAuthMech.java:92)
>> > at
>> >
>>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:233)
>> > at
>> >
>>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.transition(SecurityContextImpl.java:250)
>> > at
>> >
>>
io.undertow.security.impl.SecurityContextImpl$AuthAttempter.access$100(SecurityContextImpl.java:219)
>> > at
>> >
>>
io.undertow.security.impl.SecurityContextImpl.attemptAuthentication(SecurityContextImpl.java:121)
>> > at
>> >
>>
io.undertow.security.impl.SecurityContextImpl.authTransition(SecurityContextImpl.java:96)
>> > at
>> >
>>
io.undertow.security.impl.SecurityContextImpl.authenticate(SecurityContextImpl.java:89)
>> > at
>> >
>>
io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:55)
>> > at
>> >
>>
io.undertow.server.handlers.DisableCacheHandler.handleRequest(DisableCacheHandler.java:33)
>> > at
>> >
>>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
>> > at
>> >
>>
io.undertow.security.handlers.AuthenticationConstraintHandler.handleRequest(AuthenticationConstraintHandler.java:51)
>> > at
>> >
>>
io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
>> > at
>> >
>>
io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
>> > at
>> >
>>
io.undertow.servlet.handlers.security.ServletSecurityConstraintHandler.handleRequest(ServletSecurityConstraintHandler.java:56)
>> > at
>> >
>>
io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
>> > at
>> >
>>
io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
>> > at
>> >
>>
io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(NotificationReceiverHandler.java:50)
>> > at
>> >
>>
io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
>> > at
>> >
>>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
>> > at
>> >
>>
org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRequest(JACCContextIdHandler.java:61)
>> > at
>> >
>>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
>> > at
>> >
>>
org.keycloak.adapters.undertow.ServletPreAuthActionsHandler.handleRequest(ServletPreAuthActionsHandler.java:69)
>> > at
>> >
>>
io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
>> > at
>> >
>>
io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:284)
>> > at
>> >
>>
io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:263)
>> > at
>> >
>>
io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:81)
>> > at
>> >
>>
io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:174)
>> > at
>> io.undertow.server.Connectors.executeRootHandler(Connectors.java:202)
>> > at
>> io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793)
>> > at
>> >
>> java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1142)
>> > at
>> >
>> java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:617)
>> > at java.lang.Thread.run(Thread.java:745)
>> >
>> > My realm setup is here:
>> >
>>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/c...
>> >
>> > The keycloak.json used for the protected endpoint is:
>> >
>>
https://github.com/aerogear/aerogear-backend-cookbook/blob/master/Shoot/s...
>> >
>> > Is there some specific settings I should add to work with Keycloak
>> 1.9.x?
>> >
>> > Your help would be welcome.
>> >
>> > ++
>> > Corinne
>>
>> > _______________________________________________
>> > keycloak-dev mailing list
>> > keycloak-dev(a)lists.jboss.org
>> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
>>
>> --
>>
>> abstractj
>> PGP: 0x84DC9914
>>
>
>
_______________________________________________
keycloak-dev mailing
listkeycloak-dev@lists.jboss.orghttps://lists.jboss.org/mailman/listinfo/keycloak-dev
3178
days inactive
3179
days old
5 comments
3 participants
participants (3)
-
Bruno Oliveira -
Corinne Krych -
Marek Posolda