[keycloak-dev] Master update breaks account console
Stan Silvert
ssilvert at redhat.com
Thu Nov 14 14:28:26 EST 2019
Fixing the slash was no problem but it looks like something else is
broken. Trying to initialize Keycloak, it gets a 400 error when it's
trying to
dohttp://localhost:8080/auth/realms/master/protocol/openid-connect/token
Server side:
14:21:45,918 WARN [org.keycloak.events] (default task-24)
type=CODE_TO_TOKEN_ERROR, realmId=master, clientId=account, userId=null,
ipAddress=127.0.0.1, error=invalid_client_credentials,
grant_type=authorization_code
Any ideas?
On 11/14/2019 6:56 AM, Stian Thorgersen wrote:
> Yes, this was changed due to default hostname provider.
>
> Stan do you need the auth-url or a URL to something else? If the
> latter the safest is to use the builder to get the path, unless you
> are doing that on the client side.
>
> On Thu, 14 Nov 2019 at 10:07, Jan Lieskovsky <jlieskov at redhat.com
> <mailto:jlieskov at redhat.com>> wrote:
>
>
> On Wed, Nov 13, 2019 at 10:46 PM Stan Silvert <ssilvert at redhat.com
> <mailto:ssilvert at redhat.com>> wrote:
>
> In new account console, I pass the auth URL to Freemarker. I
> call:
>
> session.getContext().getUri(UrlType.FRONTEND).getBaseUri().toString())
>
> This has always returned something like
> "http://localhost:8080/auth"
>
> However, the latest in master puts a slash at the end,
> "http://localhost:8080/auth/"
>
>
> I can easily update my code for this to work, but I'm
> concerned that
> this change might have broken more than just the new account
> console.
> Perhaps other code in the community is relying on the URL not
> having a
> slash at the end.
>
> Does anyone recognize the change that might have caused this?
>
>
> Might be related with the recent new default hostname provider
> (KEYCLOAK-11728) change.
> At least this change in corresponding test acceptance criteria
> <https://github.com/keycloak/keycloak/commit/b8881b8ea062afa2f1b5a613dd856900b73f2121#diff-42f10e03d16b143ad9c65c3791f8c387L92>
> would suggest so.
>
> But given the corresponding test was changed to expect slash at
> the end, I would say this
> is expected behaviour now. @Stian Thorgersen
> <mailto:stian at redhat.com> Can you confirm?
>
>
> Stan
>
>
> Thank you && Regards, Jan
> --
> Jan iankko Lieskovsky / Keycloak / RH-SSO Team
>
>
> _______________________________________________
> keycloak-dev mailing list
> keycloak-dev at lists.jboss.org <mailto:keycloak-dev at lists.jboss.org>
> https://lists.jboss.org/mailman/listinfo/keycloak-dev
>
More information about the keycloak-dev
mailing list