Re: [keycloak-user] Keycloak using HTTPS, error login Facebook

[Este remetente foi reprovado em nossas verificações de detecção de fraude e pode não ser quem ele parece ser. Saiba mais sobre falsificação em http://aka.ms/LearnAboutSpoofing] Hi Everyone, I¹m using Keycloak 1.9.8 in production. Everything was working fine before I configured to use HTTPS. Now when I try to login using Facebook, I get the error below. Normal login with email and password is working fine. Steps: * Go to a restricted page * On Keycloak login page click on the Facebook icon * Login at Facebook * When Facebook tries to redirect back, after a couple minutes I get the error below 2017-02-09 14:36:22,502 ERROR [org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider] (default task-1) Failed to make identity provider oauth callback: java.net.ConnectException: Connection timed out at java.net.PlainSocketImpl.socketConnect(Native Method) at java.net.AbstractPlainSocketImpl.doConnect(AbstractPlainSocketImpl.java:35 0) at java.net.AbstractPlainSocketImpl.connectToAddress(AbstractPlainSocketImpl. java:206) at java.net.AbstractPlainSocketImpl.connect(AbstractPlainSocketImpl.java:188) at java.net.SocksSocketImpl.connect(SocksSocketImpl.java:392) at java.net.Socket.connect(Socket.java:589) at sun.security.ssl.SSLSocketImpl.connect(SSLSocketImpl.java:668) at sun.security.ssl.BaseSSLSocketImpl.connect(BaseSSLSocketImpl.java:173) at sun.net.NetworkClient.doConnect(NetworkClient.java:180) at sun.net.www.http.HttpClient.openServer(HttpClient.java:432) at sun.net.www.http.HttpClient.openServer(HttpClient.java:527) at sun.net.www.protocol.https.HttpsClient.<init>(HttpsClient.java:264) at sun.net.www.protocol.https.HttpsClient.New(HttpsClient.java:367) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.getNewHttpCl ient(AbstractDelegateHttpsURLConnection.java:191) at sun.net.www.protocol.http.HttpURLConnection.plainConnect0(HttpURLConnectio n.java:1105) at sun.net.www.protocol.http.HttpURLConnection.plainConnect(HttpURLConnection .java:999) at sun.net.www.protocol.https.AbstractDelegateHttpsURLConnection.connect(Abst ractDelegateHttpsURLConnection.java:177) at sun.net.www.protocol.http.HttpURLConnection.getOutputStream0(HttpURLConnec tion.java:1283) at sun.net.www.protocol.http.HttpURLConnection.getOutputStream(HttpURLConnect ion.java:1258) at sun.net.www.protocol.https.HttpsURLConnectionImpl.getOutputStream(HttpsURL ConnectionImpl.java:250) at org.keycloak.broker.provider.util.SimpleHttp.asString(SimpleHttp.java:141) at org.keycloak.broker.oidc.AbstractOAuth2IdentityProvider$Endpoint.authRespo nse(AbstractOAuth2IdentityProvider.java:228) at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method) at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java: 62) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorIm pl.java:43) at java.lang.reflect.Method.invoke(Method.java:498) at org.jboss.resteasy.core.MethodInjectorImpl.invoke(MethodInjectorImpl.java: 139) at org.jboss.resteasy.core.ResourceMethodInvoker.invokeOnTarget(ResourceMetho dInvoker.java:295) at org.jboss.resteasy.core.ResourceMethodInvoker.invoke(ResourceMethodInvoker .java:249) at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(Resour ceLocatorInvoker.java:138) at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvok er.java:107) at org.jboss.resteasy.core.ResourceLocatorInvoker.invokeOnTargetObject(Resour ceLocatorInvoker.java:133) at org.jboss.resteasy.core.ResourceLocatorInvoker.invoke(ResourceLocatorInvok er.java:101) at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher .java:395) at org.jboss.resteasy.core.SynchronousDispatcher.invoke(SynchronousDispatcher .java:202) at org.jboss.resteasy.plugins.server.servlet.ServletContainerDispatcher.servi ce(ServletContainerDispatcher.java:221) at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(Ht tpServletDispatcher.java:56) at org.jboss.resteasy.plugins.server.servlet.HttpServletDispatcher.service(Ht tpServletDispatcher.java:51) at javax.servlet.http.HttpServlet.service(HttpServlet.java:790) at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.j ava:85) at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter Handler.java:129) at org.keycloak.services.filters.KeycloakSessionServletFilter.doFilter(Keyclo akSessionServletFilter.java:88) at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:60) at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(Filter Handler.java:131) at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.jav a:84) at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleReq uest(ServletSecurityRoleHandler.java:62) at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(Servl etDispatchingHandler.java:36) at org.wildfly.extension.undertow.security.SecurityContextAssociationHandler. handleRequest(SecurityContextAssociationHandler.java:78) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle r.java:43) at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.han dleRequest(SSLInformationAssociationHandler.java:131) at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.han dleRequest(ServletAuthenticationCallHandler.java:57) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle r.java:43) at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest (AbstractConfidentialityHandler.java:46) at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHand ler.handleRequest(ServletConfidentialityConstraintHandler.java:64) at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleReques t(AuthenticationMechanismsHandler.java:60) at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.ha ndleRequest(CachedAuthenticatedSessionHandler.java:77) at io.undertow.security.handlers.NotificationReceiverHandler.handleRequest(No tificationReceiverHandler.java:50) at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.ha ndleRequest(AbstractSecurityContextAssociationHandler.java:43) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle r.java:43) at org.wildfly.extension.undertow.security.jacc.JACCContextIdHandler.handleRe quest(JACCContextIdHandler.java:61) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle r.java:43) at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandle r.java:43) at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(Serv letInitialHandler.java:284) at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(Servlet InitialHandler.java:263) at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletIniti alHandler.java:81) at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(Servlet InitialHandler.java:174) at io.undertow.server.Connectors.executeRootHandler(Connectors.java:202) at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:793) at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java: 1142) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java :617) at java.lang.Thread.run(Thread.java:745) 2017-02-09 14:36:22,503 WARN [org.keycloak.events] (default task-1) type=LOGIN_ERROR, realmId=accounts, clientId=null, userId=null, ipAddress=10.112.0.28, error=identity_provider_login_failure -- Leonardo Nunes ________________________________ Esta mensagem pode conter informação confidencial e/ou privilegiada. Se você não for o destinatário ou a pessoa autorizada a receber esta mensagem, não poderá usar, copiar ou divulgar as informações nela contidas ou tomar qualquer ação baseada nessas informações. Se você recebeu esta mensagem por engano, por favor avise imediatamente o remetente, respondendo o e-mail e em seguida apague-o. Agradecemos sua cooperação. This message may contain confidential and/or privileged information. If you are not the addressee or authorized to receive this for the addressee, you must not use, copy, disclose or take any action based on this message or any information herein. If you have received this message in error, please advise the sender immediately by reply e-mail and delete this message. Thank you for your cooperation _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user