Hi all,
Please help me with the following issue.
I try to configure Spring Security Adapter (version 2.3.0.Final):
https://keycloak.gitbooks.io/securing-client-applications-guide/content/t...
I suppose that Keycloak uses the static client registration since when I tries to connect
without the client configuration in Keycloak I get the following:
16:15:43,174 WARN [org.keycloak.events] (default task-3) type=LOGIN_ERROR,
realmId=master, clientId=st_1, userId=null, ipAddress=192.168.111.33,
error=client_not_found
Please note that I was able to connect to Keycloak using non Keycloak OIDC client using
the following configuration:
a) clientId
b) clientSecret
c) Scopes
d) redirectUris
Therefore I have configured the client at Keycloak using the same information.
I am not sure what is "Valid Redirect URIs" and I have configured the following
value:
http://192.168.110.2:8081/app/sso/login
Now client redirects to Keycloak IDP using this URL
http://192.168.110.2:8080/auth/realms/master/protocol/openid-connect/auth...
I authenticate the user and IDP returns URL back to the client using this URL:
http://192.168.110.2:8081/app/sso/login?state=14%2F9a4376fa-06e2-4188-a61...
Unfortunately then I have the endless loop.
While I debug KeycloakAuthenticationProcessingFilter I see that AuthOutcome get value
NOT_ATTEMPTED and it cause additional redirect to IDP.
What I missed?
I have opened the bug
https://issues.jboss.org/browse/KEYCLOAK-3868 with attached json
file and Spring Security configuration
Best regards,
Michael