7:57 a.m.
Good morning guys, I'm banging my head against the wall with this issue:
https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what I'm trying to
do is integrate the latest changes on master with UPS on AeroGear.
On AS7 the application runs with no errors, but when I try to deploy on
Wildfly I get HTTP 400 after login.
Probably is some misconfiguration on my end, but I already double checked
project-integrations, checked the examples, tried to debug on IntelliJ and
Chrome.
Here are the steps to reproduce:
git clone git@github.com:keycloak/keycloak.git && cd keycloak && mvn
clean install -DskipTests=true -Dcheckstyle.skip=true
cd ..
git clone git@github.com:aerogear/aerogear-parent.git && cd
aerogear-parent && git checkout KeycloakBeta4 && mvn clean install
cd ..
git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn clean
install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
cp auth-server/target/auth-server.war
$JBOSS_HOME/standalone/deployments/
cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
$JBOSS_HOME/bin/standalone.sh
If you have an idea, let me know.
--
abstractj
PGP: 0x84DC9914
8:21 a.m.
I think I've also seen that exception when using Keycloak in LiveOak on
WildFly, but I believe it doesn't prevent anything from working, at least
from the tests I've done.
But it would be nice to know what's causing it.
Ken
On Thu, Jul 24, 2014 at 8:57 AM, Bruno Oliveira <bruno(a)abstractj.org> wrote:
Good morning guys, I'm banging my head against the wall with this
issue:
https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what
I'm trying to
do is integrate the latest changes on master with UPS on AeroGear.
On AS7 the application runs with no errors, but when I try to deploy on
Wildfly I get HTTP 400 after login.
Probably is some misconfiguration on my end, but I already double checked
project-integrations, checked the examples, tried to debug on IntelliJ and
Chrome.
Here are the steps to reproduce:
git clone git@github.com:keycloak/keycloak.git && cd keycloak && mvn
clean install -DskipTests=true -Dcheckstyle.skip=true
cd ..
git clone git@github.com:aerogear/aerogear-parent.git && cd
aerogear-parent && git checkout KeycloakBeta4 && mvn clean install
cd ..
git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn clean
install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
cp auth-server/target/auth-server.war
$JBOSS_HOME/standalone/deployments/
cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
$JBOSS_HOME/bin/standalone.sh
If you have an idea, let me know.
--
abstractj
PGP: 0x84DC9914
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
8:23 a.m.
My guess is that something is wrong with your keycloak.json.
On 7/24/2014 9:21 AM, Ken Finnigan wrote:
I think I've also seen that exception when using Keycloak in
LiveOak
on WildFly, but I believe it doesn't prevent anything from working, at
least from the tests I've done.
But it would be nice to know what's causing it.
Ken
On Thu, Jul 24, 2014 at 8:57 AM, Bruno Oliveira <bruno(a)abstractj.org
<mailto:bruno@abstractj.org>> wrote:
Good morning guys, I'm banging my head against the wall with this
issue:
https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically
what I'm trying to
do is integrate the latest changes on master with UPS on AeroGear.
On AS7 the application runs with no errors, but when I try to
deploy on
Wildfly I get HTTP 400 after login.
Probably is some misconfiguration on my end, but I already double
checked
project-integrations, checked the examples, tried to debug on
IntelliJ and
Chrome.
Here are the steps to reproduce:
git clone git@github.com:keycloak/keycloak.git && cd keycloak && mvn
clean install -DskipTests=true -Dcheckstyle.skip=true
cd ..
git clone git@github.com:aerogear/aerogear-parent.git && cd
aerogear-parent && git checkout KeycloakBeta4 && mvn clean install
cd ..
git clone git@github.com:aerogear/aerogear-unifiedpush-server.git
&& cd
aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
cp auth-server/target/auth-server.war
$JBOSS_HOME/standalone/deployments/
cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
$JBOSS_HOME/bin/standalone.sh
If you have an idea, let me know.
--
abstractj
PGP: 0x84DC9914
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
8:51 a.m.
Hi Stan, this is my json file
https://github.com/aerogear/aerogear-unifiedpush-server/blob/KeycloakBeta...
On 2014-07-24, Stan Silvert wrote:
My guess is that something is wrong with your keycloak.json.
On 7/24/2014 9:21 AM, Ken Finnigan wrote:
>I think I've also seen that exception when using Keycloak in LiveOak on
>WildFly, but I believe it doesn't prevent anything from working, at least
>from the tests I've done.
>
>But it would be nice to know what's causing it.
>
>Ken
>
>
>
>On Thu, Jul 24, 2014 at 8:57 AM, Bruno Oliveira <bruno(a)abstractj.org
><mailto:bruno@abstractj.org>> wrote:
>
> Good morning guys, I'm banging my head against the wall with this
> issue:
> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically
> what I'm trying to
> do is integrate the latest changes on master with UPS on AeroGear.
>
> On AS7 the application runs with no errors, but when I try to
> deploy on
> Wildfly I get HTTP 400 after login.
>
> Probably is some misconfiguration on my end, but I already double
> checked
> project-integrations, checked the examples, tried to debug on
> IntelliJ and
> Chrome.
>
> Here are the steps to reproduce:
>
> git clone git@github.com:keycloak/keycloak.git && cd keycloak &&
mvn
> clean install -DskipTests=true -Dcheckstyle.skip=true
> cd ..
> git clone git@github.com:aerogear/aerogear-parent.git && cd
> aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
> cd ..
> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git
> && cd
> aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>
> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
> cp auth-server/target/auth-server.war
> $JBOSS_HOME/standalone/deployments/
> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>
> $JBOSS_HOME/bin/standalone.sh
>
> If you have an idea, let me know.
>
> --
>
> abstractj
> PGP: 0x84DC9914
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
>
>
>
>_______________________________________________
>keycloak-dev mailing list
>keycloak-dev(a)lists.jboss.org
>https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
PGP: 0x84DC9914
8:24 a.m.
This exception happens when you have an old cookie and it is expired or
the realm's keys have changed. Clear your persistent cookies and shut
down your browser to remove session cookies. Or, just put up with the
message.
On 7/24/2014 9:21 AM, Ken Finnigan wrote:
I think I've also seen that exception when using Keycloak in
LiveOak on
WildFly, but I believe it doesn't prevent anything from working, at
least from the tests I've done.
But it would be nice to know what's causing it.
Ken
On Thu, Jul 24, 2014 at 8:57 AM, Bruno Oliveira <bruno(a)abstractj.org
<mailto:bruno@abstractj.org>> wrote:
Good morning guys, I'm banging my head against the wall with this issue:
https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically
what I'm trying to
do is integrate the latest changes on master with UPS on AeroGear.
On AS7 the application runs with no errors, but when I try to deploy on
Wildfly I get HTTP 400 after login.
Probably is some misconfiguration on my end, but I already double
checked
project-integrations, checked the examples, tried to debug on
IntelliJ and
Chrome.
Here are the steps to reproduce:
git clone git@github.com:keycloak/keycloak.git && cd keycloak && mvn
clean install -DskipTests=true -Dcheckstyle.skip=true
cd ..
git clone git@github.com:aerogear/aerogear-parent.git && cd
aerogear-parent && git checkout KeycloakBeta4 && mvn clean install
cd ..
git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
cp auth-server/target/auth-server.war
$JBOSS_HOME/standalone/deployments/
cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
$JBOSS_HOME/bin/standalone.sh
If you have an idea, let me know.
--
abstractj
PGP: 0x84DC9914
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
https://lists.jboss.org/mailman/listinfo/keycloak-dev
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
8:27 a.m.
If the realm's keys change should we not invalidate the cookies?
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: keycloak-dev(a)lists.jboss.org
Sent: Thursday, 24 July, 2014 2:24:15 PM
Subject: Re: [keycloak-dev] Wildfly integration
This exception happens when you have an old cookie and it is expired or
the realm's keys have changed. Clear your persistent cookies and shut
down your browser to remove session cookies. Or, just put up with the
message.
On 7/24/2014 9:21 AM, Ken Finnigan wrote:
> I think I've also seen that exception when using Keycloak in LiveOak on
> WildFly, but I believe it doesn't prevent anything from working, at
> least from the tests I've done.
>
> But it would be nice to know what's causing it.
>
> Ken
>
>
>
> On Thu, Jul 24, 2014 at 8:57 AM, Bruno Oliveira <bruno(a)abstractj.org
> <mailto:bruno@abstractj.org>> wrote:
>
> Good morning guys, I'm banging my head against the wall with this
> issue:
> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically
> what I'm trying to
> do is integrate the latest changes on master with UPS on AeroGear.
>
> On AS7 the application runs with no errors, but when I try to deploy on
> Wildfly I get HTTP 400 after login.
>
> Probably is some misconfiguration on my end, but I already double
> checked
> project-integrations, checked the examples, tried to debug on
> IntelliJ and
> Chrome.
>
> Here are the steps to reproduce:
>
> git clone git@github.com:keycloak/keycloak.git && cd keycloak &&
mvn
> clean install -DskipTests=true -Dcheckstyle.skip=true
> cd ..
> git clone git@github.com:aerogear/aerogear-parent.git && cd
> aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
> cd ..
> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
> aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>
> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
> cp auth-server/target/auth-server.war
> $JBOSS_HOME/standalone/deployments/
> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>
> $JBOSS_HOME/bin/standalone.sh
>
> If you have an idea, let me know.
>
> --
>
> abstractj
> PGP: 0x84DC9914
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
>
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
8:49 a.m.
Hi Bill, I did a full clean up and the shutdown on Chrome and Firefox,
HTTP 400 persists, now with no server side errors but the session is
still null take a look:
https://gist.github.com/anonymous/f8b58b93e478b5505db2#file-log-txt-L28
On 2014-07-24, Bill Burke wrote:
This exception happens when you have an old cookie and it is expired
or
the realm's keys have changed. Clear your persistent cookies and shut
down your browser to remove session cookies. Or, just put up with the
message.
On 7/24/2014 9:21 AM, Ken Finnigan wrote:
> I think I've also seen that exception when using Keycloak in LiveOak on
> WildFly, but I believe it doesn't prevent anything from working, at
> least from the tests I've done.
>
> But it would be nice to know what's causing it.
>
> Ken
>
>
>
> On Thu, Jul 24, 2014 at 8:57 AM, Bruno Oliveira <bruno(a)abstractj.org
> <mailto:bruno@abstractj.org>> wrote:
>
> Good morning guys, I'm banging my head against the wall with this issue:
> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically
> what I'm trying to
> do is integrate the latest changes on master with UPS on AeroGear.
>
> On AS7 the application runs with no errors, but when I try to deploy on
> Wildfly I get HTTP 400 after login.
>
> Probably is some misconfiguration on my end, but I already double
> checked
> project-integrations, checked the examples, tried to debug on
> IntelliJ and
> Chrome.
>
> Here are the steps to reproduce:
>
> git clone git@github.com:keycloak/keycloak.git && cd keycloak &&
mvn
> clean install -DskipTests=true -Dcheckstyle.skip=true
> cd ..
> git clone git@github.com:aerogear/aerogear-parent.git && cd
> aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
> cd ..
> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
> aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>
> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
> cp auth-server/target/auth-server.war
> $JBOSS_HOME/standalone/deployments/
> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>
> $JBOSS_HOME/bin/standalone.sh
>
> If you have an idea, let me know.
>
> --
>
> abstractj
> PGP: 0x84DC9914
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org <mailto:keycloak-dev@lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
>
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
PGP: 0x84DC9914
9:52 a.m.
Got the same issue here, looking into it now
----- Original Message -----
From: "Bruno Oliveira" <bruno(a)abstractj.org>
To: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
Sent: Thursday, 24 July, 2014 1:57:38 PM
Subject: [keycloak-dev] Wildfly integration
Good morning guys, I'm banging my head against the wall with this issue:
https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what I'm
trying to
do is integrate the latest changes on master with UPS on AeroGear.
On AS7 the application runs with no errors, but when I try to deploy on
Wildfly I get HTTP 400 after login.
Probably is some misconfiguration on my end, but I already double checked
project-integrations, checked the examples, tried to debug on IntelliJ and
Chrome.
Here are the steps to reproduce:
git clone git@github.com:keycloak/keycloak.git && cd keycloak && mvn
clean install -DskipTests=true -Dcheckstyle.skip=true
cd ..
git clone git@github.com:aerogear/aerogear-parent.git && cd
aerogear-parent && git checkout KeycloakBeta4 && mvn clean install
cd ..
git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn clean
install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
cp auth-server/target/auth-server.war
$JBOSS_HOME/standalone/deployments/
cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
$JBOSS_HOME/bin/standalone.sh
If you have an idea, let me know.
--
abstractj
PGP: 0x84DC9914
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
11:30 a.m.
The problem was down to the fact that the unified-push application wasn't set to
bearer-only and Undertow seems to invoke the authentication mechanism even though it's
a non-secured resource.
What happens in details are:
1. /index.html is loaded
2. keycloak.js redirects to login page
3. Keycloak returns ?code=...
4. Undertow invokes authentication mechanism (even though /index.html is not secured),
sees the code, checks for a state cookie, doesn't find one, returns 400
One AS7 it works because AS7 doesn't invoke the authentication mechanism at all for
/index.html (which seems the correct way to me, as the resource is not part of a
secured-constraint).
Setting unified-push to bearerOnly (which it should be in any case as it's used for
jax-rs endpoints) works around the issue as our Undertow adapter will only look for bearer
token and not do anything else.
Question: is this a bug in Undertow? is it something we have to add a solution to our
Undertow adapter?
----- Original Message -----
From: "Stian Thorgersen" <stian(a)redhat.com>
To: "Bruno Oliveira" <bruno(a)abstractj.org>
Cc: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
Sent: Thursday, 24 July, 2014 3:52:48 PM
Subject: Re: [keycloak-dev] Wildfly integration
Got the same issue here, looking into it now
----- Original Message -----
> From: "Bruno Oliveira" <bruno(a)abstractj.org>
> To: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
> Sent: Thursday, 24 July, 2014 1:57:38 PM
> Subject: [keycloak-dev] Wildfly integration
>
> Good morning guys, I'm banging my head against the wall with this issue:
> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what I'm
> trying to
> do is integrate the latest changes on master with UPS on AeroGear.
>
> On AS7 the application runs with no errors, but when I try to deploy on
> Wildfly I get HTTP 400 after login.
>
> Probably is some misconfiguration on my end, but I already double checked
> project-integrations, checked the examples, tried to debug on IntelliJ and
> Chrome.
>
> Here are the steps to reproduce:
>
> git clone git@github.com:keycloak/keycloak.git && cd keycloak &&
mvn
> clean install -DskipTests=true -Dcheckstyle.skip=true
> cd ..
> git clone git@github.com:aerogear/aerogear-parent.git && cd
> aerogear-parent && git checkout KeycloakBeta4 && mvn clean install
> cd ..
> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
> aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>
> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
> cp auth-server/target/auth-server.war
> $JBOSS_HOME/standalone/deployments/
> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>
> $JBOSS_HOME/bin/standalone.sh
>
> If you have an idea, let me know.
>
> --
>
> abstractj
> PGP: 0x84DC9914
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
11:49 a.m.
What version of Wildfly? The Undertow auth should not be called for non
secured URLs.
On 7/24/2014 12:30 PM, Stian Thorgersen wrote:
The problem was down to the fact that the unified-push application
wasn't set to bearer-only and Undertow seems to invoke the authentication mechanism
even though it's a non-secured resource.
What happens in details are:
1. /index.html is loaded
2. keycloak.js redirects to login page
3. Keycloak returns ?code=...
4. Undertow invokes authentication mechanism (even though /index.html is not secured),
sees the code, checks for a state cookie, doesn't find one, returns 400
One AS7 it works because AS7 doesn't invoke the authentication mechanism at all for
/index.html (which seems the correct way to me, as the resource is not part of a
secured-constraint).
Setting unified-push to bearerOnly (which it should be in any case as it's used for
jax-rs endpoints) works around the issue as our Undertow adapter will only look for bearer
token and not do anything else.
Question: is this a bug in Undertow? is it something we have to add a solution to our
Undertow adapter?
----- Original Message -----
> From: "Stian Thorgersen" <stian(a)redhat.com>
> To: "Bruno Oliveira" <bruno(a)abstractj.org>
> Cc: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
> Sent: Thursday, 24 July, 2014 3:52:48 PM
> Subject: Re: [keycloak-dev] Wildfly integration
>
> Got the same issue here, looking into it now
>
> ----- Original Message -----
>> From: "Bruno Oliveira" <bruno(a)abstractj.org>
>> To: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
>> Sent: Thursday, 24 July, 2014 1:57:38 PM
>> Subject: [keycloak-dev] Wildfly integration
>>
>> Good morning guys, I'm banging my head against the wall with this issue:
>> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what I'm
>> trying to
>> do is integrate the latest changes on master with UPS on AeroGear.
>>
>> On AS7 the application runs with no errors, but when I try to deploy on
>> Wildfly I get HTTP 400 after login.
>>
>> Probably is some misconfiguration on my end, but I already double checked
>> project-integrations, checked the examples, tried to debug on IntelliJ and
>> Chrome.
>>
>> Here are the steps to reproduce:
>>
>> git clone git@github.com:keycloak/keycloak.git && cd keycloak &&
mvn
>> clean install -DskipTests=true -Dcheckstyle.skip=true
>> cd ..
>> git clone git@github.com:aerogear/aerogear-parent.git && cd
>> aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
>> cd ..
>> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git && cd
>> aerogear-unifiedpush-server && git checkout KeycloakBeta4 && mvn
clean
>> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>>
>> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
>> cp auth-server/target/auth-server.war
>> $JBOSS_HOME/standalone/deployments/
>> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>>
>> $JBOSS_HOME/bin/standalone.sh
>>
>> If you have an idea, let me know.
>>
>> --
>>
>> abstractj
>> PGP: 0x84DC9914
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
12:09 p.m.
Hi Bill, Wildfly 8.0.0 Final
On 2014-07-24, Bill Burke wrote:
What version of Wildfly? The Undertow auth should not be called for
non
secured URLs.
On 7/24/2014 12:30 PM, Stian Thorgersen wrote:
> The problem was down to the fact that the unified-push application wasn't set to
bearer-only and Undertow seems to invoke the authentication mechanism even though it's
a non-secured resource.
>
> What happens in details are:
>
> 1. /index.html is loaded
> 2. keycloak.js redirects to login page
> 3. Keycloak returns ?code=...
> 4. Undertow invokes authentication mechanism (even though /index.html is not
secured), sees the code, checks for a state cookie, doesn't find one, returns 400
>
> One AS7 it works because AS7 doesn't invoke the authentication mechanism at all
for /index.html (which seems the correct way to me, as the resource is not part of a
secured-constraint).
>
> Setting unified-push to bearerOnly (which it should be in any case as it's used
for jax-rs endpoints) works around the issue as our Undertow adapter will only look for
bearer token and not do anything else.
>
> Question: is this a bug in Undertow? is it something we have to add a solution to
our Undertow adapter?
>
> ----- Original Message -----
>> From: "Stian Thorgersen" <stian(a)redhat.com>
>> To: "Bruno Oliveira" <bruno(a)abstractj.org>
>> Cc: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
>> Sent: Thursday, 24 July, 2014 3:52:48 PM
>> Subject: Re: [keycloak-dev] Wildfly integration
>>
>> Got the same issue here, looking into it now
>>
>> ----- Original Message -----
>>> From: "Bruno Oliveira" <bruno(a)abstractj.org>
>>> To: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
>>> Sent: Thursday, 24 July, 2014 1:57:38 PM
>>> Subject: [keycloak-dev] Wildfly integration
>>>
>>> Good morning guys, I'm banging my head against the wall with this
issue:
>>> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what
I'm
>>> trying to
>>> do is integrate the latest changes on master with UPS on AeroGear.
>>>
>>> On AS7 the application runs with no errors, but when I try to deploy on
>>> Wildfly I get HTTP 400 after login.
>>>
>>> Probably is some misconfiguration on my end, but I already double checked
>>> project-integrations, checked the examples, tried to debug on IntelliJ and
>>> Chrome.
>>>
>>> Here are the steps to reproduce:
>>>
>>> git clone git@github.com:keycloak/keycloak.git && cd keycloak
&& mvn
>>> clean install -DskipTests=true -Dcheckstyle.skip=true
>>> cd ..
>>> git clone git@github.com:aerogear/aerogear-parent.git && cd
>>> aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
>>> cd ..
>>> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git &&
cd
>>> aerogear-unifiedpush-server && git checkout KeycloakBeta4 &&
mvn clean
>>> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>>>
>>> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
>>> cp auth-server/target/auth-server.war
>>> $JBOSS_HOME/standalone/deployments/
>>> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>>>
>>> $JBOSS_HOME/bin/standalone.sh
>>>
>>> If you have an idea, let me know.
>>>
>>> --
>>>
>>> abstractj
>>> PGP: 0x84DC9914
>>> _______________________________________________
>>> keycloak-dev mailing list
>>> keycloak-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
--
abstractj
PGP: 0x84DC9914
4:05 a.m.
----- Original Message -----
From: "Bill Burke" <bburke(a)redhat.com>
To: keycloak-dev(a)lists.jboss.org
Sent: Thursday, 24 July, 2014 5:49:22 PM
Subject: Re: [keycloak-dev] Wildfly integration
What version of Wildfly? The Undertow auth should not be called for non
secured URLs.
I used 8.1.0.Final
On 7/24/2014 12:30 PM, Stian Thorgersen wrote:
> The problem was down to the fact that the unified-push application wasn't
> set to bearer-only and Undertow seems to invoke the authentication
> mechanism even though it's a non-secured resource.
>
> What happens in details are:
>
> 1. /index.html is loaded
> 2. keycloak.js redirects to login page
> 3. Keycloak returns ?code=...
> 4. Undertow invokes authentication mechanism (even though /index.html is
> not secured), sees the code, checks for a state cookie, doesn't find one,
> returns 400
>
> One AS7 it works because AS7 doesn't invoke the authentication mechanism at
> all for /index.html (which seems the correct way to me, as the resource is
> not part of a secured-constraint).
>
> Setting unified-push to bearerOnly (which it should be in any case as it's
> used for jax-rs endpoints) works around the issue as our Undertow adapter
> will only look for bearer token and not do anything else.
>
> Question: is this a bug in Undertow? is it something we have to add a
> solution to our Undertow adapter?
>
> ----- Original Message -----
>> From: "Stian Thorgersen" <stian(a)redhat.com>
>> To: "Bruno Oliveira" <bruno(a)abstractj.org>
>> Cc: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
>> Sent: Thursday, 24 July, 2014 3:52:48 PM
>> Subject: Re: [keycloak-dev] Wildfly integration
>>
>> Got the same issue here, looking into it now
>>
>> ----- Original Message -----
>>> From: "Bruno Oliveira" <bruno(a)abstractj.org>
>>> To: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
>>> Sent: Thursday, 24 July, 2014 1:57:38 PM
>>> Subject: [keycloak-dev] Wildfly integration
>>>
>>> Good morning guys, I'm banging my head against the wall with this
issue:
>>> https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what
>>> I'm
>>> trying to
>>> do is integrate the latest changes on master with UPS on AeroGear.
>>>
>>> On AS7 the application runs with no errors, but when I try to deploy on
>>> Wildfly I get HTTP 400 after login.
>>>
>>> Probably is some misconfiguration on my end, but I already double checked
>>> project-integrations, checked the examples, tried to debug on IntelliJ
>>> and
>>> Chrome.
>>>
>>> Here are the steps to reproduce:
>>>
>>> git clone git@github.com:keycloak/keycloak.git && cd keycloak
&& mvn
>>> clean install -DskipTests=true -Dcheckstyle.skip=true
>>> cd ..
>>> git clone git@github.com:aerogear/aerogear-parent.git && cd
>>> aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
>>> cd ..
>>> git clone git@github.com:aerogear/aerogear-unifiedpush-server.git &&
cd
>>> aerogear-unifiedpush-server && git checkout KeycloakBeta4 &&
mvn clean
>>> install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
>>>
>>> cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
>>> cp auth-server/target/auth-server.war
>>> $JBOSS_HOME/standalone/deployments/
>>> cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
>>>
>>> $JBOSS_HOME/bin/standalone.sh
>>>
>>> If you have an idea, let me know.
>>>
>>> --
>>>
>>> abstractj
>>> PGP: 0x84DC9914
>>> _______________________________________________
>>> keycloak-dev mailing list
>>> keycloak-dev(a)lists.jboss.org
>>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>>
>> _______________________________________________
>> keycloak-dev mailing list
>> keycloak-dev(a)lists.jboss.org
>> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
Bill Burke
JBoss, a division of Red Hat
http://bill.burkecentral.com
_______________________________________________
keycloak-dev mailing list
keycloak-dev(a)lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-dev
1:07 p.m.
Thank you guys, the latest changes on UPS fixed the issue.
On 2014-07-24, Stian Thorgersen wrote:
The problem was down to the fact that the unified-push application
wasn't set to bearer-only and Undertow seems to invoke the authentication mechanism
even though it's a non-secured resource.
What happens in details are:
1. /index.html is loaded
2. keycloak.js redirects to login page
3. Keycloak returns ?code=...
4. Undertow invokes authentication mechanism (even though /index.html is not secured),
sees the code, checks for a state cookie, doesn't find one, returns 400
One AS7 it works because AS7 doesn't invoke the authentication mechanism at all for
/index.html (which seems the correct way to me, as the resource is not part of a
secured-constraint).
Setting unified-push to bearerOnly (which it should be in any case as it's used for
jax-rs endpoints) works around the issue as our Undertow adapter will only look for bearer
token and not do anything else.
Question: is this a bug in Undertow? is it something we have to add a solution to our
Undertow adapter?
----- Original Message -----
> From: "Stian Thorgersen" <stian(a)redhat.com>
> To: "Bruno Oliveira" <bruno(a)abstractj.org>
> Cc: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
> Sent: Thursday, 24 July, 2014 3:52:48 PM
> Subject: Re: [keycloak-dev] Wildfly integration
>
> Got the same issue here, looking into it now
>
> ----- Original Message -----
> > From: "Bruno Oliveira" <bruno(a)abstractj.org>
> > To: "keycloak dev" <keycloak-dev(a)lists.jboss.org>
> > Sent: Thursday, 24 July, 2014 1:57:38 PM
> > Subject: [keycloak-dev] Wildfly integration
> >
> > Good morning guys, I'm banging my head against the wall with this issue:
> > https://gist.github.com/abstractj/b5b79bf3a5eb77e7989a, basically what I'm
> > trying to
> > do is integrate the latest changes on master with UPS on AeroGear.
> >
> > On AS7 the application runs with no errors, but when I try to deploy on
> > Wildfly I get HTTP 400 after login.
> >
> > Probably is some misconfiguration on my end, but I already double checked
> > project-integrations, checked the examples, tried to debug on IntelliJ and
> > Chrome.
> >
> > Here are the steps to reproduce:
> >
> > git clone git@github.com:keycloak/keycloak.git && cd keycloak
&& mvn
> > clean install -DskipTests=true -Dcheckstyle.skip=true
> > cd ..
> > git clone git@github.com:aerogear/aerogear-parent.git && cd
> > aerogear-parent && git checkout KeycloakBeta4 && mvn clean
install
> > cd ..
> > git clone git@github.com:aerogear/aerogear-unifiedpush-server.git &&
cd
> > aerogear-unifiedpush-server && git checkout KeycloakBeta4 &&
mvn clean
> > install -Pwildfly -DskipTests=true -Dcheckstyle.skip=true
> >
> > cp databases/unifiedpush-h2-ds.xml $JBOSS_HOME/standalone/deployments
> > cp auth-server/target/auth-server.war
> > $JBOSS_HOME/standalone/deployments/
> > cp server/target/ag-push.war $JBOSS_HOME/standalone/deployments
> >
> > $JBOSS_HOME/bin/standalone.sh
> >
> > If you have an idea, let me know.
> >
> > --
> >
> > abstractj
> > PGP: 0x84DC9914
> > _______________________________________________
> > keycloak-dev mailing list
> > keycloak-dev(a)lists.jboss.org
> > https://lists.jboss.org/mailman/listinfo/keycloak-dev
> >
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev(a)lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
--
abstractj
PGP: 0x84DC9914
3807
days inactive
3808
days old
12 comments
5 participants
participants (5)
-
Bill Burke -
Bruno Oliveira -
Ken Finnigan -
Stan Silvert -
Stian Thorgersen