Hi! Our customer uses our application (running with Keycloak 6.0.1) with multiple tabs open. We recognized that there's a scenario where keycloak.js generates invalid urls in updateToken method where parameter refresh_token is undefined: "postData": { "mimeType": "application/x-www-form-urlencoded", "text": "grant_type=refresh_token&refresh_token=undefined&client_id=r6-ui", .... }) We can reproduce this behaviour on our customers environment with: * enable SSO * with a Kerberos plugin for automatic login * open multiple tabs from within tab 1 * refresh tab 1 or wait for session timeout So it look like, that we can manage it in the multi tab scenario, to call clearToken while a updateToken request is processed. Is there anything we can do to overcome this issue? Kind regards, Wolfgang <!--- har snipped --> { "startedDateTime": "2019-08-27T15:12:12.434Z", "time": 5.363002419471741, "request": { "method": "POST", "url": "http://host/auth/realms/R6/protocol/openid-connect/token", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Origin", "value": "http://host" }, { "name": "Accept-Encoding", "value": "gzip, deflate" }, { "name": "Host", "value": "host" }, { "name": "Accept-Language", "value": "de-DE,de;q=0.9,en-US;q=0.8,en;q=0.7" }, { "name": "User-Agent", "value": "Mozilla/5.0 (Windows NT 6.3; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/76.0.3809.100 Safari/537.36" }, { "name": "Content-type", "value": "application/x-www-form-urlencoded" }, { "name": "Accept", "value": "*/*" }, { "name": "Referer", "value": "http://host/r6-ui/client/index" }, { "name": "Cookie", "value": "AUTH_SESSION_ID=73fa22f1-b574-4714-abe1-42fce5f900db.dev-06; KEYCLOAK_IDENTITY=..." }, { "name": "Connection", "value": "keep-alive" }, { "name": "Content-Length", "value": "64" } ], "queryString": [], "cookies": [ { "name": "AUTH_SESSION_ID", "value": "73fa22f1-b574-4714-abe1-42fce5f900db.dev-06", "expires": null, "httpOnly": false, "secure": false }, { "name": "KEYCLOAK_IDENTITY", "value": "....", "expires": null, "httpOnly": false, "secure": false }, { "name": "KEYCLOAK_SESSION", "value": "R6/a5f78b44-bcaa-4b88-bd48-298c57a8f9f2/73fa22f1-b574-4714-abe1-42fce5f900db", "expires": null, "httpOnly": false, "secure": false } ], "headersSize": 1310, "bodySize": 64, "postData": { "mimeType": "application/x-www-form-urlencoded", "text": "grant_type=refresh_token&refresh_token=undefined&client_id=r6-ui", "params": [ { "name": "grant_type", "value": "refresh_token" }, { "name": "refresh_token", "value": "undefined" }, { "name": "client_id", "value": "r6-ui" } ] } }, "response": { "status": 400, "statusText": "Bad Request", "httpVersion": "HTTP/1.1", "headers": [ { "name": "Pragma", "value": "no-cache" }, { "name": "Date", "value": "Tue, 27 Aug 2019 15:10:40 GMT" }, { "name": "Server", "value": "Apache/2.4.39 (Unix) OpenSSL/1.0.2k-fips" }, { "name": "Content-Type", "value": "application/json" }, { "name": "Access-Control-Allow-Origin", "value": "http://host" }, { "name": "Access-Control-Expose-Headers", "value": "Access-Control-Allow-Methods" }, { "name": "Cache-Control", "value": "no-store" }, { "name": "Access-Control-Allow-Credentials", "value": "true" }, { "name": "Connection", "value": "close" }, { "name": "Content-Length", "value": "69" } ], "cookies": [], "content": { "size": 69, "mimeType": "application/json", "compression": 0 }, "redirectURL": "", "headersSize": 395, "bodySize": 69, "_transferSize": 464 }, "cache": {}, "timings": { "blocked": 1.3490057005882263, "dns": -1, "ssl": -1, "connect": -1, "send": 0.07300000000000001, "wait": 3.2689990525245665, "receive": 0.6719976663589478, "_blocked_queueing": 1.0850057005882263 }, "serverIPAddress": "10.1.85.183", "_initiator": { "type": "script", "stack": { "callFrames": [ { "functionName": "exec", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1812461 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1812565 }, { "functionName": "setSuccess", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1792930 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1794553 } ], "parent": { "description": "postMessage", "callFrames": [ { "functionName": "", "scriptId": "506", "url": "http://host/auth/realms/R6/protocol/openid-connect/login-status-iframe.html", "lineNumber": 109, "columnNumber": 25 }, { "functionName": "checkCookie", "scriptId": "506", "url": "http://host/auth/realms/R6/protocol/openid-connect/login-status-iframe.html", "lineNumber": 31, "columnNumber": 20 }, { "functionName": "req.onreadystatechange", "scriptId": "506", "url": "http://host/auth/realms/R6/protocol/openid-connect/login-status-iframe.html", "lineNumber": 61, "columnNumber": 28 } ], "parent": { "description": "XMLHttpRequest.send", "callFrames": [ { "functionName": "checkState", "scriptId": "506", "url": "http://host/auth/realms/R6/protocol/openid-connect/login-status-iframe.html", "lineNumber": 69, "columnNumber": 16 }, { "functionName": "receiveMessage", "scriptId": "506", "url": "http://host/auth/realms/R6/protocol/openid-connect/login-status-iframe.html", "lineNumber": 108, "columnNumber": 8 } ], "parent": { "description": "postMessage", "callFrames": [ { "functionName": "checkLoginIframe", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1795110 }, { "functionName": "Keycloak.kc.updateToken", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1812527 }, { "functionName": "R6AuthenticationHolderImpl.updateToken", "scriptId": "498", "url": "http://host/r6-ui/client/resources/lib.js", "lineNumber": 0, "columnNumber": 1061095 }, { "functionName": "R6SessionHandlerImpl.check", "scriptId": "498", "url": "http://host/r6-ui/client/resources/lib.js", "lineNumber": 0, "columnNumber": 1287472 }, { "functionName": "R6SessionHandlerImpl.updateTimeout", "scriptId": "498", "url": "http://host/r6-ui/client/resources/lib.js", "lineNumber": 0, "columnNumber": 1287221 }, { "functionName": "R6SessionInterceptor.response", "scriptId": "498", "url": "http://host/r6-ui/client/resources/lib.js", "lineNumber": 0, "columnNumber": 1286496 }, { "functionName": "response", "scriptId": "498", "url": "http://host/r6-ui/client/resources/lib.js", "lineNumber": 0, "columnNumber": 1285688 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1176239 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1176524 }, { "functionName": "$digest", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1187078 }, { "functionName": "$apply", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1189842 }, { "functionName": "done", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1143003 }, { "functionName": "completeRequest", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1147207 }, { "functionName": "xhr.onload", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1148651 } ], "parent": { "description": "load", "callFrames": [ { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1148435 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1145310 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1145529 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1176239 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1176524 }, { "functionName": "$digest", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1187078 }, { "functionName": "$apply", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1189842 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1062210 }, { "functionName": "invoke", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1076174 }, { "functionName": "doBootstrap", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1062104 }, { "functionName": "bootstrap", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1062580 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 160729 }, { "functionName": "mightThrow", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 223677 }, { "functionName": "process", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 224305 } ], "parent": { "description": "setTimeout", "callFrames": [ { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 224612 }, { "functionName": "fire", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 221268 }, { "functionName": "add", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 221726 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 224812 }, { "functionName": "Deferred", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 225492 }, { "functionName": "then", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 224663 }, { "functionName": "jQuery.fn.ready", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 226629 }, { "functionName": "jQuery.fn.init", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 218206 }, { "functionName": "jQuery", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 180073 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 160702 }, { "functionName": "tryCatcher", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 104913 }, { "functionName": "Promise._settlePromiseFromHandler", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 66489 }, { "functionName": "Promise._settlePromise", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 67772 }, { "functionName": "Promise._settlePromise0", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 68812 }, { "functionName": "Promise._settlePromises", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 70495 }, { "functionName": "Promise._fulfill", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 69308 }, { "functionName": "PromiseArray._resolve", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 75658 }, { "functionName": "PromiseArray._promiseFulfilled", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 76061 }, { "functionName": "Promise._settlePromise", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 67955 }, { "functionName": "Promise._settlePromise0", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 68812 }, { "functionName": "Promise._settlePromises", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 70495 }, { "functionName": "Async._drainQueue", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 3975 }, { "functionName": "Async._drainQueues", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 4040 }, { "functionName": "Async.drainQueues", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1696 } ], "parent": { "description": "Promise.then", "callFrames": [ { "functionName": "schedule", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 89929 }, { "functionName": "Async._queueTick", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 4229 }, { "functionName": "AsyncSettlePromises", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 2010 }, { "functionName": "util.hasDevTools.Async.settlePromises", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 3577 }, { "functionName": "Promise._fulfill", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 69332 }, { "functionName": "Promise._resolveCallback", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 64681 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 65941 }, { "functionName": "setSuccess", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1792677 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1802938 }, { "functionName": "setSuccess", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1792930 }, { "functionName": "authSuccess", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1787381 }, { "functionName": "req.onreadystatechange", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1788403 } ], "parent": { "description": "XMLHttpRequest.send", "callFrames": [ { "functionName": "processCallback", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1788608 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1806366 }, { "functionName": "setSuccess", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1792930 }, { "functionName": "iframe.onload", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1793899 } ], "parent": { "description": "load", "callFrames": [ { "functionName": "setupCheckLoginIframe", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1793572 }, { "functionName": "", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1806323 }, { "functionName": "success", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1793103 }, { "functionName": "Keycloak.kc.init", "scriptId": "496", "url": "http://host/r6-ui/client/resources/vendor.js", "lineNumber": 0, "columnNumber": 1806139 }, { "functionName": "", "scriptId": "505", "url": "http://host/r6-ui/client/index", "lineNumber": 139, "columnNumber": 17 } ] } } } } } } } } } }, "_priority": "High", "_resourceType": "xhr", "connection": "6236", "pageref": "page_6" }, ________________________________ BearingPoint Technology GmbH Sitz: Premst?tten bei Graz Firmenbuchgericht: Landesgericht f?r ZRS Graz Firmenbuchnummer: FN 44354b The information in this email is confidential and may be legally privileged. If you are not the intended recipient of this message, any review, disclosure, copying, distribution, retention, or any action taken or omitted to be taken in reliance on it is prohibited and may be unlawful. If you are not the intended recipient, please reply to or forward a copy of this message to the sender and delete the message, any attachments, and any copies thereof from your system.